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GEOLOCATIONAL PRIVACY AND 
SURVEILLANCE (GPS) ACT 


THURSDAY, MAY 17, 2012 

House of Representatives, 

Subcommittee on Crime, Terrorism, 

AND Homeland Security, 
Committee on the Judiciary, 

Washington, DC. 

The Subcommittee met, pursuant to call, at 10:03 a.m., in room 
2141, Rayburn House Office Building, the Honorable F. James Sen- 
senbrenner, Jr. (Chairman of the Subcommittee) presiding. 

Present: Representatives Sensenbrenner, Goodlatte, Lungren, 
Chaffetz, Marino, Gowdy, Cohen, Johnson, Chu, Deutch, Jackson 
Lee, and Polis. 

Staff Present: (Majority) Caroline Lynch, Subcommittee Chief 
Counsel; Arthur Radford Baker, Counsel, Tony Angeli, Counsel, 
Lindsay Hamilton, Clerk; (Minority) Bobby Vassar, Subcommittee 
Chief (Counsel; Joe Graupensperger, Counsel; and Veronica Eligan, 
Professional Staff Member. 

Mr. Sensenbrenner. The Subcommittee will be in order. With- 
out objection, the share will be authorized to declare recesses dur- 
ing votes on the floor. Today’s hearing is on H.R. 2168, the 
“Geolocational Privacy Surveillance (GPS) Act.” I would like to es- 
pecially welcome our witness and thank you for joining us today. 
I am joined by my colleague from Virginia, the distinguished Rank- 
ing Member of the Subcommittee, Bobby Scott, and also the prin- 
cipal author of the bill, the gentleman from Utah, Mr. Chaffetz. At 
this time I would like to ask unanimous consent to insert my open- 
ing statement in the record and yield my time to Mr. Chaffetz for 
an opening statement. 

[The prepared statement of Mr. Sensenbrenner follows:] 

Prepared Statement of the Honorable F. James Sensenbrenner, Jr., a Rep- 
resentative in Congress from the State of Wisconsin, and Chairman, Sub- 
committee on Crime, Terrorism, and Homeland Security 

Today’s hearing examines H.R. 2168 the “Geolocational Privacy and Surveillance” 
or the “GPS Act.” This bill introduced by the gentleman from Utah has bipartisan 
support and currently has 18 cosponsors. A similar measure has been introduced in 
the Senate. 

The law has not kept pace with the assortment of new communication devices and 
other technologies that are now widely available in today’s marketplace. This is par- 
ticularly true with location -based technology. As GPS technology has become 
cheaper, more widely available, and used more frequently in our everyday lives, the 
legal authorities and restrictions that are, or should be, in place to govern when 
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such information about another person is accessed and used have become less than 
clear. 

It is also not completely clear how location-based technology is used and exactly 
who is using it. We know that law enforcement uses it and we will hear about that 
today. But the technology is also used or can be used by commercial entities and 
really just about anyone that wants to spy on your whereabouts. 

This bill defines what geolocation information is and establishes uniform legal au- 
thorities for obtaining this information. In short, this bill does what the Supreme 
Court invited, or challenged, the legislative branch to do when they decided the 
Jones case earlier this year. In that decision. Justice Alito stated “A legislative body 
is well situated to gauge changing public attitudes, to draw detailed lines, and to 
balance privacy and public safety in a comprehensive way.” 

H.R. 2168 properly balances the appropriate use of the information obtained from 
the technology and the privacy rights of those enjoying the convenience and other 
benefits that the technology confers to us in our everyday lives. 

No one doubts that this information is useful, especially to law enforcement offi- 
cers and agents. The big question is how do we balance the needs of the police with 
the expectations of privacy of those that they protect? This bill tries to strike the 
appropriate balance and give the police the tools they need and our citizens the pri- 
vacy that they expect. 

It is no secret that court ordered electronic surveillance has long been a valuable 
tool for effective law enforcement. At least in terms of “content” interception, it is 
a technique that is typically used as a last resort, when other investigative tech- 
niques have failed or would be likely to fail or would even be too dangerous to try. 
When utilizing GPS and other location-based technology, the police often use it early 
in their investigations and there is generally no court order or supervision at all. 

By incorporating a judicial process that must be followed to seek a court order 
authorizing this type of surveillance, we are assured that, like in the case of the 
interception of a communications “content,” that this technique is not abused. 

There would likely be internal layers of review before a judicial application was 
even made. Facts would have to be established and proved, and ultimately a judge 
would be the one who decides, based on all of the information presented, if such 
a technique is warranted. 

Once authorized, law enforcement would comply with any reporting requirements 
of the court and there would be procedures to protect the rights of parties whose 
geolocational information was improperly obtained. 

It is important to underscore the fact that this bill does not take away the use 
of GPS or other geolocational technology from law enforcement officials. The loss of 
this investigative technique would be a huge risk to both our public safety and our 
national security. The bill provides some common sense and perhaps some long 
overdue “rules of the road” regarding the use of these technologies. 

I welcome our witnesses and look forward to hearing their testimony. 


Mr. Chaffetz. Thank you, Mr. Chairman. I truly do appreciate 
your cosponsoring this legislation and for holding this hearing. I 
would ask unanimous consent to insert into the record four docu- 
ments, the Salt Lake Tribune editorial of June 19, the Oregonian 
Editorial, as well as a statement from Professor Matt Blaze of Uni- 
versity of Pennsylvania, and a statement of principles from the dig- 
ital due process coalition. 

Mr. Sensenbrenner. Without objection. 

[The material referred to follows:] 
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Modern Privacy - Chaffetz' GPS bill is necessary - June 19"’, 201 1 


If a police officer \>ants to fbilou >ou around there's nothing to stop him And that's just fine 

Bui if a police officer wants your cell phone to follow >ou for him. not onl> in real lime bui over the (xist 
however main da>s. there is also nothing to .stop him Or to stop menacing cx~bo> friends from using the 
same icchnologv to annov innocent women. Or to stop phone companies and data providers from selling a 
detailed record of \ourcoming.s and goings. whc(l)cr >ou want them to or not 

And that is a problem A problem that Utah's Rep. Jason Chaffetz has a plan to solve. 

Together with Sen Ron Wyden. an Oregon Democrat, the Republican congressman from Utah's 3rd 
District is putting forward what's called the GPS Act GPS in tins ease standing tor Gcolocation Privaev 
and Surveillance 

As Chaffetz points out. current law is mostiv silent on how government, businesses and indiv iduals can 
get hold of the data generated b> cell phones, mobile computer and the GPS units found in more and 
more automobiles. That’s because most of the laws we have that might be lelcvant were w ntten when 
ihciv was no such thing as GPS devices. 

The purpose of these gizmos is lo allow you to find your wa> to a new cih or restaurant, or to allow \our 
laptop or cell phone to Hnd the network it will use to sene your needs. Those arc things that benefit >ou. 
the person who owns the machine and pa>s the bill 

A side ctfcct IS that ilie network, and some human being looking over its shoulder, can use vour pnvaic 
devices to find where you ore now. or where >ou were lost Tliursdav at midnight, and use that information 
lo .send you an advertisement v ou don't want a threatening letter or an arrest warrant 

In the cose of individuals and businesses, that ought to be against the law And the ChatTetz-Wvden bill 
would make it as illegal to do those things as it olreadv is foranvone outside law enforcement lo tap vour 
telephone. In the ease of law enforcement agencies. the> mav have legitimate rca.sons lo trace your GPS 
records, but. as is the ease with phone laps, thev should have probable cause and a warrant lo do so. 

The bill would allow the same kind of tap-first. get-warrant-aRenvard for emergencies that arc now 
allowed for phone tap warrants And it would also allow police to track you through v our GPS devices if 
tlicv have reason to believe you arc injured, lost or otherw ise m need of assistance 

The bill IS exactiv the kind of thing that Congress should be about, updating law s to make them conform 
at once to changing technologies and eternal standards of pnvacy and indiv idual rights 
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Protecting the Privacy of Those Whose Cellphones are Tracking - 

June 19'\ 2011 

It's only been 25 or so years that the Li S government granted civilian access to U S Air Force 
satellites supporting what was then a science-Fiction technology known as global positioning. 
Americans were learning brave new things like personal computing and the use of email, but 
global positioning technology .started to come of age. too. with the result today that email is 
quaint and GPS guides us to destinations with voiced driving instructions, speeds parcel delivery 
to our homes via trackable trucks, and even helps hikers, bikers and golfers decide their nest best 
moves. 

Geolocation technology also lurks within many of our cellphones. iPhones, high-end 
Blackberries and other devices so enmeshed in everyday life. It can do wondrous things, among 
them pinpoint a caller's location to emergency crews in tlie event 9-1-1 is dialed ~ or help police 
bypass gumshoe ploddings and go straight to the suspect Unless GPS is actively turned off - in 
some devices not a practical possibility - it tracks its keeper 24/7 just as it would another 
delivery truck, 

Oregon Senator Ron Wyden. joined by Utah Rep Jason Chaffetz. stands back to ask: Just who 
gets to know where everybody is”* 

It's a simple but vexing question. .And he and Chaffetz are dead rigltt to worry about such a thing, 
because it cuts straight to the core of civil liberty in a democracy that increasingly depends upon 
it. 

While the information generated by geolocation technology bounces off publicly owned 
satellites and is recorded by the computers of service providers along the way. it is, like the 
content of a telephone call, private In the absence of a search warrant, an electronic record 
showing that a person stopped at a city park and a Safeway on the way to work on a Friday 
morning should no more be the government's property than it is open to purchase by a business 
or a spy 

But right now the rules governing the uses and protections of geolocation information are a blur, 
if they exist at all 

Wyden and Chaffetz this week floated legislation that would require any law enforcement 
agency seeking to track an individual first obtain a search warrant showing probable cause of a 
crime exists By persuasively linking the need for such information to a case, the agency would 
clear the same bar now in place for tapping a citizen's telephone 



5 


(Oregonian 

(I (milnueill 

That's precisely as it should be. Our zoomy and emerging technologies, compelling and lil'c- 
enhancing in so many ways, have shot beyond our ability to manage their first consequence of 
use the electronic pilcup of personal information. And we've shown ourselves in recent years to 
be better at excitedly adopting new technologies than in adapting, or even understanding, their 
legal, cultural and political consequences 

We're still learning when it comes to the near-antique telephone, which saw runaway and 
unauthorized lapping in the wake of the World Trade Center terrorist attacks Yet the ground 
niles on telephone taps continue to be debated in such a way that pits national security interests 
against personal privacy 

Global positioning technology and the record lefl by it needn't suffer as contentious a fate 

The Wyden and Chaffetz measure, long in the making and headed for hearings, could help to 
protect everyone's privacy while leaving open legal approaches for selective tracking of 
individuals. Meanwhile it would require that commercial service providers obtain a customer's 
permission before releasing their geolocation information, and hackers and stalkers found to be 
tracking a person's movements would see swift punishment 

With such wise protections in place, there's no reason not to enjoy the next cool geolocating 
device - whether you can turn it off or not 
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House Committee on the Judiciary 
Subcommittee on Crime, Terrorism, and Homeland Security 
Hearing on the Geolocation Privacy and Surveillance (GPS) Act 
Statement for the Record of 
Professor Matt Blaze 
May 17, 2012 

1. Introduction and Background 

Thank you for the opportunity to provide some background about location 
technology in current and emerging wireless networking. I hope my remarks 
vdll be helpful in understanding how location information is calculated and the 
direction that this important and yet rather complex technology is taking. I 
offer this statement today on my own behalf and do not represent any other 
party or organization. 

Let me preface my remarks by pointing out an important and essential - 
feature of H.R. 2168: it does not limit its coverage to one specific type of 
location tracking technology. As I will discuss below, geolocation is an area 
that is enjoying a period of rapid technological innovation and competition 
among different technologies. Many assumptions that might have been true 
several years ago, such as that GPS satellites always provide higher precision 
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location information than the cellular network does, are no longer universally 
true today. For any legislation that seeks to regulate the use of location 
tracking technology to remain meaningful in the years to come, it is critical 
that it avoid defining terms in ways that are likely to become obsolete soon 
after it becomes law. HR 2168 accomplishes this by defining “geolocation 
information” sufficiently broadly to encompass the range of high-precision 
location technologies likely to be relevant in the foreseeable future. 

I am currently an associate professor of computer and information science at 
the University of Pennsylvania in Philadelphia, where I serve as director of the 
Distributed Computing Laboratory and conduct research on computer security, 
cryptography, network communication, and surveillance technology. Prior to 
joining the faculty at Penn, I was for 12 years a member of the research staff 
at AT&T Labs (previously known as AT&T Bell Labs) in New Jersey. I have a 
PhD in computer science from Princeton University, a Masters degree from 
Columbia, and I completed my undergraduate studies at the City University of 
New York. 

A focus of my research is on the properties and capabilities of surveillance 
technology (both lawful and illicit) in the context of modern digital systems 
and communications networks. This research aims to strengthen our critical 
infrastructure against criminals and other unauthorized eavesdroppers and to 
help ensure that authorized surveillance systems work as intended in the 
rapidly changing environments in which they must reliably collect evidence and 
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investigative intelligence. Sometimes, this work has led to surprising 
observations about real-world surveillance systems. For example, in 1994, I 
discovered weaknesses in the NSA's “Clipper” key escrow encryption system 
that led to that system's abandonment before it was widely deployed. More 
recently, my graduate students and I found previously undiscovered 
vulnerabilities in analog telephone wiretaps used by law enforcement, and we 
identified ways for law enforcement agencies to harden their CALEA intercept 
systems against a variety of surveillance countermeasures. 

There is perhaps no more ubiquitous symbol of our highly connected society 
than the cellular telephone. Over the course of only a few short decades, 
mobile communication devices have evolved from being little more than an 
expensive curiosity for the wealthy into a basic necessity for most Americans, 
transforming the way we communicate with one another, do business, and 
obtain and manage the increasing volume of information that is available to us. 
According to recent estimates, there are today more than 285 million active 
wireless subscriber accounts in the United States. Many households now forgo 
traditional “landline” telephone service, opting instead for cellular phones 
carried by each family member. Wireless carriers have strained to keep up 
with the explosive demand for cellular service, in many areas deploying new 
infrastructure (most visibly cellular antenna towers) as quickly as they can find 
places to put it. 
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As difficult as it may be to imagine modern life without the cell phone, it is 
sometimes easy to forget how rapidly the technology has come about and how 
quickly new research ideas in wireless communication can advance into 
products and services that we take for granted. Over the last 25 years the 
mobile telephone has transformed from an analog voice-only service (originally 
available in only a few markets) into a high-bandwidth, always-on Internet 
access portal. “Smartphones”, such as the latest iPhones and Android devices, 
act not just as voice telephones, but as personal digital organizers, music 
players, cameras, email readers, and personal computers, in a package that 
fits in our pocket. We now carry our phones with us wherever we go, and we 
expect them to have service wherever we happen to be. 

Many of the most important and innovative new applications and services that 
run on mobile devices take advantage of the ability to quickly and 
automatically detect the user's location to provide location-specific 
information and advice. At the same time, cellular providers calculate where 
phones in their networks are located (and how they move) to manage various 
network functions and to plan where new infrastructure is required. 


2. Wireless Location Technologies 

Unlike conventional wireline telephones, cellular telephones and cellular data 
devices use radio to communicate between the users’ handsets and the 
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telephone network. Cellular service providers maintain networks of radio base 
stations (also called “cell sites”) spread throughout their geographic coverage 
areas. Each base station is responsible for making connections between the 
regular telephone network and nearby cellular phones when they make or 
receive calls. Cell phone handsets periodically (and automatically) identify 
themselves to the nearest base station (that with the strongest radio signal) as 
they move about the coverage area. If a phone moves away from the base 
station with which it started a call and nearer to a different base station, the 
call is “handed off” between base stations without interruption. This process 
of “registration” between a phone and the nearest cellular base stations 
happens automatically whenever a cellular handset is turned on; no 
intervention by the user is required. The effect is that phones will generally 
work any time they are within radio range of at least one base station, which 
allows users to use their phone at any location in their provider's geographic 
coverage area. 

There are two different technical approaches that can be used for calculating 
the location of a cell phone. In the first approach, the user's phone calculates 
its own location using special GPS satellite receiver hardware built in to the 
handset. In the second approach, the cellular system infrastructure 
calculates the location of the phones that are active in the network, using the 
normal cellular radio interfaces and without explicit assistance from the users' 
handsets. 
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2.1 Handset-based GPS 

For smartphone applications that run on the user’s handset, the most 
prominent location technology is GPS. In GPS location, a user’s phone contains 
spedal hardware that receives signals from a constellation of global position 
satellites. This allows a phone handset to calculate its latitude and longitude 
whenever it is in range of the satellites. GPS technology can achieve very high 
spatial resolution (typically within ten meters). In the latest phone models 
that incorporate GPS chipset hardware, GPS location features are integrated 
into applications for mapping, street directions, and to obtain information 
about local services and merchants. 

Whether or not the calculated GPS location of a handset is sent to the network 
(or any other third party) depends on the application software that the phone 
is running. Some applications, as a matter of course, may periodically transmit 
their location to external services. For example, a mapping application might 
send its current GPS-calculated location to a network-based service in order to 
discover, say, the locations of nearby businesses that might be of interest to 
the user. Network-based services that make use of a phone's GPS location 
might be offered by the cellular carrier or by a third party, internet-based 
entity. 

Unfortunately, GPS, for all its promise, has a number of fundamental 
limitations. It relies on special hardware in the phone (particularly a GPS 
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receiver chip) that is currently included only in the latest handset models and 
that generally is enabled for location tracking only when the phone user is 
explicitly using it to run a location-based application on the phone. Perhaps 
most importantly, GPS works reliably only outdoors, when the handset is in 
“view” of several GPS satellites in the sky above. 


2.2 Network-based location 

GPS is only one technology for cell location, and while it is the most visible to 
the end user, GPS is neither the most pervasive nor the most generally 
applicable cellular phone location system, especially in the surveillance 
context. More ubiquitously available are techniques that (unlike GPS) do not 
depend on satellites or special hardware in the handset, but rather on radio 
signal data collected and analyzed at the cellular providers' towers and base 
stations. These “network-based” location techniques can give the position of 
virtually every handset active in the network at any time, regardless of 
whether the mobile devices are equipped with GPS chips and without the 
explicit knowledge or active cooperation of the phone users. 

The accuracy and precision with which a handset can be located by network- 
based (non-GPS) techniques depends on a range of factors, but has been 
steadily improving as technology has advanced and as new infrastructure is 
deployed in cellular networks. Under some circumstances, the latest 
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generation of this technology permits the network to calculate users’ locations 
with a precision that approaches that of GPS. 

Network-based location techniques work by exploiting the cellular radio 
infrastructure that communicates between the network and the users’ phones. 
All cellular systems have an extensive network of base stations (“towers”) 
spread throughout their areas of service such that a cell phone in any locations 
in the coverage area is within radio range of at least one base station. This 
arrangement essentially divides the carrier's coverage area into a mosaic of 
local “sectors”, each served by an antenna at a local cellular base station. 
Network-based location enables a cellular provider to identify the sector in 
which a user’s phone is located, and, in some cases, to further pinpoint their 
location within a sector. 


2.2.1 Sector identification 

At a minimum, cellular providers record the identity of the particular base 
station (or sector) with which a cellular phone was communicating every time 
it makes or receives a call and whenever it moves from one sector to another. 
How precisely this information by itself allows a phone to be located depends 
on the size of the sector; phones in smaller sectors can be located with better 
accuracy than those in larger sectors. 
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Historically, in the first cellular systems, base stations were generally placed as 
far apart from one another as possible while still providing adequate radio 
coverage across the area terrain (effectively making the sector areas they 
cover as large as technically possible). In early cellular systems, a base station 
might have covered an area several miles or more in diameter (and in sparsely 
populated, rural areas, this may still be true today). But as cellular phones 
have become more popular and as users expect their devices to do more and to 
work in more locations, the size of the “typical” cell sector has been steadily 
shrinking. 

The reason for this trend toward smaller cell sectors is the explosive growth in 
the demand for wireless technology. A sector base station can handle only a 
limited number of simultaneous call connections given the amount of radio 
spectrum “bandwidth” allocated to the wireless carrier. As the density of 
cellular users grows in a given area, the only way for a carrier to accommodate 
more customers is to divide the coverage area into smaller and smaller sectors, 
each served by their own base stations and antennas. New services such as 3G 
and LET Internet create additional pressure on the available spectrum 
bandwidth, usually requiring, again, that the area covered by each sector be 
made smaller and smaller. At the same time, users increasingly rely on their 
mobile devices to work wherever they happen to be, indoors and out, on the 
street, in offices and residences, even in basements and elevators. The only 
way to make service more reliable in more places under varying radio 
conditions is to add base stations that cover “dead spots”. Adding base 
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stations to eliminate dead spots further reduces the area of a typical sector's 
coverage. 

As a result of these pressures, the number of cellular base stations has been 
growing steadily, with a corresponding decrease in the geographic area served 
by each. According to a recent Cellular Telecommunications Industry 
Association (CTIA) study, there are more than three times as many cellular base 
stations today as there were ten years ago. Indeed, this trend has been 
accelerating in recent years, with the deployment of the latest generation of 
smaller and smaller-scale cellular base stations (called, variously, “microcells”, 
“picocells” and “femtocells”) designed to serve very small areas, such as 
particular floors of buildings or even individual homes and offices. 

The effect of this trend toward smaller sectors is that knowing the identity of 
the base station (or sector ID) that handled a call is tantamount to knowing a 
phone’s location to within a relatively small geographic area. In relatively 
unpopulated areas with open terrain, a sector might cover an area miles in 
diameter. But In urban areas and other environments that use microcells, a 
sector’s coverage area can be quite small indeed, sometimes effectively 
identifying individual floors and rooms within buildings. 
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2.2.2 Enhanced location with time- and angle- of arrival 

The decreasing size of cell sectors is not the only factor making cellular 
network-based location more accurate. New technology allows cellular 
network providers to locate not just the sector in which the users' wireless 
device is located, but its position within the sector. By correlating the precise 
time and angle at which a given device's signal arrives at multiple sector base 
stations, new technology now makes it practical for a network operator to 
pinpoint a phone's latitude and longitude at a level of accuracy that can 
approach that of GPS. 

A variety of “off-the-shelf” products and system upgrades have recently 
become available to cellular providers that use enhanced time- and/or angle- 
of arrival calculations to collect precise location information about users’ 
devices as they move around the network. Current commercially available 
versions of this technology can pinpoint a phone's location to an accuracy of 
within 50 meters or less under many circumstances, and emerging versions of 
the technology can increase accuracy even beyond that. This is accomplished 
without requiring any new or special hardware (such as GPS chips) to be 
installed on the end-users' phones. Accurate locations can be tracked with this 
technology even when no calls are being made or received, as long as the 
user’s phone is turned on and is within a coverage area. (Whether locations 
are routinely tracked and recorded at times other than when calls are made or 
received depends on the policy of the particular carrier). 
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Although these enhanced location technologies are not yet universally available 
in every network, wireless carriers are deploying them because they provide 
information that is extremely valuable in managing their networks and 
businesses. By tracking more precisely where mobile devices are located 
within sectors (and their patterns of movement), a carrier can better identify 
where new infrastructure might be required, where old infrastructure might be 
redundant, and how and where their customers use different service offerings. 

While each carrier has its own data collection and retention practices, carriers 
typically create “call detail records” that can include the most accurate 
location information available to them. Historically, before more advanced 
location techniques were available, carrier call detail records typically have 
included only the cell sector or base station identifier that handled the call. As 
discussed in the previous section, the base station or sector identifier now 
carries with it far more locational precision than it once did. But as even 
more precise location information becomes available, these records 
increasingly (now and in the future) can effectively include what amounts to 
the customer's latitude and longitude along with the sector IDs traditionally 
used in cellular carrier databases. Some carriers will also store this location 
information not just when calls are made or received, but also about “idle” 
phones as they move about the network. Creating and maintaining detailed 
records about the locations of phones as they move from place to place makes 
good engineering sense, and we should expect the trend toward more, and 
more precise, location data collection to continue as part of the natural 
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progression of commercial wireless technology. Once the infrastructure to 
collect it is installed, the marginal cost of collecting and storing high-resolution 
location data about every customer is relatively small. Such information will be 
collected because it is extraordinarily valuable for network management, for 
marketing, and for developing new services. 


3. Cell Phone Location and Law Enforcement Surveillance 

As noted above, even on networks that do not employ time-of-arrival or angle- 
of-arrival location enhancements, the base station or sector location now 
identifies the location of a surveillance target with increasing specificity as 
cellular sectors become smaller and smaller and as microcells, picocells, and 
femtocells are being deployed to provide denser coverage. In legacy systems 
or in rural areas, a sector ID might currently specify only a radius of several 
miles, while in a dense urban environment with microcells, it could identify an 
individual floor or even a room within a building. How precise the sector 
identity locates a target depends on the layout of the particular carrier's 
network and where in the network the target is located, but the industry trend 
is moving inexorably toward sectors that cover smaller and smaller areas. 

Most carriers' systems use a variety of large and small sector configurations 
that vary based on the different terrain and densities they must cover. A 
mobile user, in the course of his or her daily movements, will periodically move 
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in and out of large and small sectors. Even if the network only records cell 
tower data, the precision of that data will vary widely for any given customer 
over the course of a given day, from the relatively less precise to the relatively 
very precise, and neither the user nor the carrier will be able to predict 
whether the next data location collected will be relatively more or less 
precise. For a typical user, over time, some of that data will inevitably reveal 
locational precision approaching that of GPS. 

As cellular carriers roll out better location technologies in the course of their 
business, the location information sent to law enforcement (as transmitted 
from the carrier's call database in (near) real time in response to a wiretap 
order) is, inherently, becoming more and more precise. As sectors become 
smaller, the locational information they reveal becomes more intrinsically 
precise. And as networks improve, sector data is increasingly being linked to or 
supplanted by even more accurately calculated position information about each 
customer’s handset. 

In the past, when cell sectors were widely spaced and before the availability of 
the enhanced network-based location technologies now being deployed by 
wireless carriers, it may have been technically sound to distinguish between 
location based on the cellular network (at presumably low accuracy) and that 
based on GPS (at higher accuracy). Today, however, this distinction is 
increasingly obsolete, and as cellular networking technology evolves, it is 
becoming effectively meaningless. As microcell technology and enhanced 
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location techniques become more widely deployed in cellular networks, the 
information revealed by the cell sector identifier pinpoints, under many 
circumstances, a user's location to a degree once possible only with dedicated 
GPS tracking devices. It is no longer valid to assume that the cell sector 
recorded by the network will give only an approximate indication of a user's 
location. The gap between the locational precision in today’s cellular call 
detail records and that of a GPS tracker is closing, especially as carriers 
incorporate the latest technologies into their networks. 

As the precision provided by cellular network-based location techniques 
approaches that of GPS-based tracking technology, cellular location tracking 
can have significant advantages for law enforcement surveillance operations 
over traditional GPS trackers. New and emerging cell location techniques can 
work indoors and in places not typically accessible to GPS receivers. Cellular 
location information is routinely, quietly and automatically calculated by the 
network, without triggering any unusual or overt behavior that might be 
detected by the subject. And the “tracking device” is now a benign object 
that is deliberately carried by the target - his or her telephone, computer, or 
tablet. 


IS 
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Updating The Electronic Communications Privacy Act of 1986 

Overarching goal and guiding principle: To simplify, clarify, and unify the ECPA standards, providing stronger 
privacy protections for communications and associated data in response to changes in technology- and new 
services and usage patterns, while preserving the legal tools necessary^ for government agencies to enforce laws, 
respond to emergency circumstances and protect the public. These principles would not change, and are subject 
to. the current definitions, exceptions, immunities and permis.sions in ECPA. 


1. A governmental entity may require an entity covered by ECPA (a provider of -wire or electronic 
communication service or a provider of remote computing service) to disclose communications that are 
not readily accessible to the public only with a search warrant issued based on a showing of probable 
cause, regardless of the age of the communications, the means or status of their storage or the provider’s 
access to or use of the communications in its normal business operations. 

2. A governmental entity may access, or may require a covered entity to provide, prospectively or 
retrospectively, location information regarding a mobile communications device only with a warrant 
issued based on a showing of probable cause. 

3. A governmental entity may access, or may require a covered entity to provide, prospectively or 
in real time, dialed number information, email to and from information or other data currently covered 
by the authority for pen registers and trap and trace devices only after judicial review and a court finding 
that the governmental entity has made a showing at least as strong as the showing under 2703(d). 


4. Where the Stored Communications Act authorizes a subpoena to acquire information, a 
governmental entity may use such subpoenas only for information related to a specified account(s) or 
individual(s). All non-particularized requests must be subject to judicial approval. 
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Mr. Chaffetz. The role of Congress is to protect and defend the 
United States Constitution and personal liberties provided to 
American citizens under the Fourth Amendment. Put simply, the 
government and law enforcement should not he ahle to track some- 
body indefinitely without their knowledge or consent or without ob- 
taining a probable cause warrant from a judge. Just because it can 
be done doesn’t mean it necessarily should be done. 

With that in mind, I recently introduced the Geolocational Pri- 
vacy and Surveillance Act. Companion legislation was also intro- 
duced in the United States Senate by Senator Ron Wyden of Or- 
egon. I appreciate the bipartisan support of this bill, cosponsors in 
the Judiciary Committee include Chairman Sensenbrenner, Chair- 
man Goodlatte, Chairman Coble, Representative Lofgren and 
Ranking Member Conyers. The bill creates a legal framework de- 
signed to give government agencies, commercial entities and pri- 
vate citizens clear guidelines for when and how geolocation infor- 
mation can be accessed and used. 

In Jones, the recent Supreme Court case on the issue, the court 
ruled unanimously that physically attaching a GPS device to a ve- 
hicle constituted the search under the Fourth Amendment. Most 
law enforcement agencies have responded by requiring their offi- 
cers to obtain probable cause warrants before placing GPS devices 
on vehicles. However, the court stopped short of requiring a war- 
rant for all geolocation information, including that obtained from 
other devices or methods such as smartphones or, for instance, the 
OnStar System. 

The Supreme Court has laid down the broad principle that loca- 
tion tracking without a warrant constitutes a search under the 
Fourth Amendment, it is now up to Congress to enact a com- 
prehensive statute to fill in the details. In fact. Justice Alito specifi- 
cally identified Congress appropriate place to resolve the difficult 
issues associated with the collision of new technologies and their 
impact on civil rights when he noted, “In circumstances involving 
dramatic technological change, the best solution to privacy concerns 
may be legislative. A legislative body is well situated to gauge 
changing public attitudes to draw detailed lines and to balance pri- 
vacy and public safety in a comprehensive way.” 

I believe that Americans have a reasonable expectation of pri- 
vacy. And I agree wholeheartedly with Justice Alito’s notion that 
it is truly the Congress that should deal with it. I applaud the 
Chairman for holding this hearing. I thank the witnesses for at- 
tending and for their thoughtful testimony, and I yield back the 
balance of my time. 

Mr. Sensenbrenner. The Chair recognizes the gentleman from 
Virginia, Mr. Scott, for an opening statement. 

Mr. Scott. Thank you, Mr. Chairman. Today we meet to discuss 
the Geolocational Privacy and Surveillance Act, a bill intended to 
clarify the standards of government access to certain types of per- 
sonal location information. With greater conveniences that tech- 
nology affords us, we also have new challenges to our privacy 
rights because of the types of information that is generated about 
us, how it is stored and by whom it can be accessed. 

The Supreme Court’s 1967 decision, Katz v. The United States 
continues to direct our privacy jurisprudence. In that case, a man 
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calls from a pay phone booth, were recorded by device attached to 
the outside of the booth by the FBI. The court ruled that this 
eavesdropping was a search under the Fourth Amendment because 
it violated a man’s reasonable expectation of privacy. That stand- 
ard should continue to guide us today. 

When you see something, when we go somewhere in public, you 
know that we may be seen by others, even if we do not want others 
to know where we are. The visual recognition by others is the risk 
that we take. What do not expect is a carrying of personal commu- 
nication devices such as cell phones will be used by the government 
to track and record our every move. This is particularly the case 
of cell phone-based location information has become, in many cases, 
available and actually more accurate than GPS because of the pro- 
liferation of micro cells. 

We have laws to make accommodations between privacy rights 
and sometimes urgent need of law enforcement to investigate 
crimes. For example. Congress has drafted several statutes to re- 
strict government access to the content of an electronic communica- 
tion, but provides less stringent standards for accessing non con- 
tent records, merely reflecting that a communication took place. 
The Electronic Communications Privacy Act was enacted in 1986, 
but it did not contemplate every possible technological advance and 
it does not provide clear guidance as to what steps the government 
must take in order to obtain location data from devices like cell 
phones and navigation systems in cars. 

This bill addresses this gap by requiring the government to show 
probable cause and get a warrant in order to obtain a historical 
and prospective data about the location of our citizens. The bill in- 
cludes an exception for emergency situations. Given our expecta- 
tions of privacy, this bill should be a good starting point for our dis- 
cussion on this issue. So I thank the gentleman from Utah for his 
work on the issue. And Mr. Chairman, I yield back the balance of 
my time. 

Mr. Sensenbrenner. Without objection, all Members’ opening 
statements will be put in the record at this point. It is now my 
pleasure to introduce today’s witnesses. John Ramsey is currently 
one of the national vice presidents of the Federal Law Enforcement 
Officers Association. And I right in calling it FLEOA? 

Mr. Ramsey. Yes, sir. 

Mr. Sensenbrenner. Okay. Mr. Ramsey was elected to this posi- 
tion in November of 2008, and serves as one of the ten elected 
board members representing 26,000 Federal law enforcement offi- 
cers from nearly every Federal law enforcement agency. 

Mr. Ramsey also a member of FLEOA’S national legal committee 
and serves as the national legal liaison director and chapter presi- 
dent for Mississippi. Mr. Ramsey is employed by the U.S. Depart- 
ment of Veterans Affairs Office of Inspector General in Jackson, 
Mississippi as the resident agent in charge. He has been with the 
VA OIG since 2000. He received a bachelor of science in criminal 
justice from Georgia State University and his Master’s from George 
Washington University in forensics and criminology. 

Mr. Joseph Cassilly is active with the Maryland State Attorneys 
Association having held several offices including two terms as 
president of the Association. He is the past president of the Na- 
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tional District Attorney’s Association and is on the board of direc- 
tors of NDAA. He was sworn in as assistant State’s Attorney in Oc- 
tober 1977, and in 1982, he was elected State’s Attorney for Har- 
ford County, Maryland and has been reelected six times. He joined 
the U.S. Army in 19 and served with F company 75th Rangers, 
25th infantry division. He was awarded a combat infantry badge. 
Purple Heart and Army commendation medal. He received a Bach- 
elor of arts in psychology from University of Arizona in 1974, and 
his JD from the University of Baltimore Law School in 1977. 

Edward Black has been president and CEO of the Computer and 
Communications Industry Association since 1995. He previously 
served for nearly a decade as CCIA’s vice president and general 
counsel. He is past chairman of the State Department’s Advisory 
Committee on International Communications and Information Pol- 
icy and past president of the Washington International Trade Asso- 
ciation and Foundation and chairman of the Pro Trade Group. He 
serves on the board of directors of the interoperability clearing- 
house. 

After serving as legislative director for Representative Louis 
Stokes in the early 1970’s, Mr. Black served as congressional liai- 
son for the State Department. He then served as chief of staff to 
Representative John LaFalce of New York before again returning 
to the executive branch as Deputy to the Assistant Secretary for 
Congressional affairs for the Secretary of Commerce. He subse- 
quently practiced law in the private sector. He received his Bach- 
elor of Arts degree from Muhlenberg College and his JD degree 
from the American University Washington College of Law. 

Catherine Crump is a staff attorney with the ACLU, Speech Pri- 
vacy and Technology Project. She is a non residential fellow at the 
Stanford Center for Internet and Security. Prior to joining the 
ACLU, she clerked for the Honorable M. Margaret McKeown of the 
U.S. Court of Appeals for the Ninth Circuit. She received her un- 
dergraduate degree from Stanford in 2000. Served as a Fulbright 
Fellow from 2000 to 2001, and received her JD degree from Stan- 
ford Law School in 2004. 

The witnesses’ written statements will be entered into the record 
in their entirety. I ask you to summarize your testimony in 5 min- 
utes or less. To help you stay within the time limit you have got 
the red, yellow and green lights in front of you. The Chair has a 
reputation for banging the gavel when the red light goes on, and 
I now recognize Mr. Ramsey. 

TESTIMONY OF JOHN R. RAMSEY, NATIONAL VICE PRESIDENT, 
FEDERAL LAW ENFORCEMENT OFFICERS ASSOCIATION 

Mr. Ramsey. Thank you. Chairman Sensenbrenner, Ranking 
Member Scott and other distinguished Members of the Committee. 
Thank you for the opportunity to testify today. On behalf of the 
26,000 members of FLEOA, I am voicing our concerns with this 
proposed bill. The proposed legislation will impact all Federal law 
enforcement. Geolocational surveillance is an invaluable tool to 
combat domestic and international crime and terrorism in addition 
to rendering aid in exigent circumstances. As the proposed legisla- 
tion stands, geolocational information has been given an overly 
broad definition and application. As written one could easily inter- 
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pret PIN registers, OnStar and even E-ZPasses as geolocational in- 
formation. 

These are not witch hunts that law enforcement officers are in- 
volved in. Information obtained with these court orders provides 
law enforcement with historical data as well as possible location in- 
formation which becomes important when determine weather the 
need rises to the level of a court order or a warrant. 

While conducting everyday ongoing criminal investigations, court 
orders issued to communication companies may provide law en- 
forcement with geolocational information. This information can be 
critical when it comes to potentially unlocking evidence that may 
lead to the apprehension of a murderer or rapist, or even saving 
lives. 

If law enforcement wants to know the content of a target’s con- 
versation, the most protected type of communication, we know that 
current Federal law and supreme court rulings require the 
issuance of a warrant as in the case with government-owned loca- 
tional devices and Title III intercepts. The difference in this situa- 
tion is that the government does not own nor are they attaching 
the locational device to a person. 

Currently with a court order, law enforcement may request the 
possible location of a cellular device from a communication com- 
pany via their cell tower or cell site information, which enables law 
enforcement to potentially infer a general area where a particular 
call originated, not necessarily a precise location. Cell site informa- 
tion only gives an approximate location versus a precise or exact 
location like GPS devices. Cell phones are not government-owned 
locational beacons, the government did not attach the GPS device 
to someone’s personal cell phone unlike government-owned GPS de- 
vices attached to vehicles. 

Seconds count when lives are at risk. Law enforcement should 
not be further hindered during their investigation of time sensitive 
cases that may involve the threat of serious bodily harm or death 
by imposing additional legal hurdles that may jeopardize the lives 
of countless innocent Americans. The Supreme Court did not ex- 
tend Jones decision to cell phones, law enforcement is not seeking 
the content of conversations, nor are we trying to step on someone’s 
expectation of privacy. We are simply looking at corporate records 
just like financial records to which a legally-authorized subpoena 
or court order would suffice. 

While our membership respects the constitutional rights of all 
citizens, we do not want to see the United States adopt unneces- 
sary legislation. If our country’s laws allow for the disclosure of cor- 
porate records pursuant to legally authorized court orders or sub- 
poenas, the same standard should apply to all corporate records to 
include communication companies. 

Geolocation communication information should be treated no dif- 
ferently. We hope your Committee understands our concerns with 
the proposed legislation and respects our position. I would like to 
thank the Committee Members for your continued support of law 
enforcement and an opportunity to testify today. 

Mr. Sensenbrenner. Thank you. 

[The prepared statement of Mr. Ramsey follows:] 
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Prepared Statement of John R. Ramsey, National Vice President, 
Federal Law Enforcement Officers Association 

Chairman Sensenbrenner, Vice-Chairman Gohmert, and distinguished Members 
of the Committee: 

I would like to thank you for the opportunity to testify today. I appear before you 
today in my official capacity as the National Vice President of the Federal Law En- 
forcement Officers Association (FLEOA). On behalf of the 26,000 members of the 
FLEOA, 1 am voicing our concerns with H.R. 2168. The proposed legislation will im- 
pact all Federal law enforcement. Geolocational surveillance is an invaluable tool to 
combat domestic and international crime and terrorism, in addition to rendering 
aide in exigent circumstances, such as child exploitation cases. 

Geolocational communication services focuses on historical information and poten- 
tial real-time information. This issue should not be confused with real-time con- 
versations and/or Title III intercepts. However, as the proposed legislation stands, 
geolocational information has been given an overly broad definition and application. 
As written, one could easily interpret pen registers, On-Star, and EZ-Passes as 
“geolocational information.” What we are focused on in this situation is wireless 
communication information currently obtained through a court order signed by a 
United States Judge. These are not witch hunts as some may allude to. Information 
obtained with these court orders provides law enforcement with historical data, as 
well as possible location information, which becomes important when determining 
whether the need rises to the level of a court order or a warrant. 

While conducting everyday on-going criminal investigations, court orders issued to 
communication companies may provide law enforcement with geolocation informa- 
tion. This information can be critical when it comes to potentially unlocking the evi- 
dence that may lead to the apprehension of a murderer or rapist. If law enforcement 
wants to know the “content” of a target’s conversation, the most protected type of 
communication, we know that current Federal law and Supreme Court rulings re- 
quire the issuance of a warrant, as in the case with Government-owned location de- 
vices and Title III intercepts. The difference in this situation is that the Govern- 
ment does not own nor are they attaching the locational device to a person. With 
the current exceptions built into the proposed legislation, at least law enforcement 
has some leeway with regards to abductions and other exigent circumstances. 

In order to better understand the intricacies of this issue, we need to take a closer 
look at “geolocational information,” With a court order, law enforcement may have 
the opportunity at seeing who a killer or rapist called, in the past, by requesting 
historical data/records from a communication company. With a court order, pen reg- 
isters may provide law enforcement with phone numbers, including the area codes, 
which may identify where a call was placed from, such as a specific state and/or 
city, similar to cell-tower information. With a court order, law enforcement may be 
able to see where the killer or rapist bought gas or used an ATM, by requesting 
historical information from a financial institution. Currently, with a court order, law 
enforcement may request the possible location of a cellular device from a commu- 
nication company via cell-tower or cell-site information, which enables law enforce- 
ment to potentially infer a general area where a particular call originated, not a 
precise location. Cell-site information only gives an approximate location at best, 
versus a precise or exact location like GPS devices. Cell phones are not Government- 
owned locational beacons. The Government did not attach a GPS device to some- 
one’s personal cellular phone, unlike Government-owned GPS devices attached to 
vehicles. I would like to stress that all of these scenarios, information gathered does 
not contain the “content” of a conversation. 

Law enforcement is permitted to gather information using court orders, a legal 
document or proclamation signed by a United States Judge in which the court or- 
ders a person to perform a specific act, or in some circumstances, prohibits them 
from performing a specific act. What is the next step? Are we going to do away with 
grand jury subpoenas and move to the issuance of search warrants for companies 
to disclose corporate and financial records? Law enforcement can request a sub- 
poena and obtain employment records, medical records, and other personal and pri- 
vate information of individuals that are targets of criminal investigations. Who are 
we protecting with this legislation? The innocent or the criminals? FLEOA takes the 
position that the innocent were and are not targets of criminal investigations. 
FLEOA is also not suggesting that criminals, or those suspected of criminal wrong 
doing, have less constitutional rights than a law abiding citizen. But do we really 
want to slow down the apprehension of murderers and rapists so they can build 
their trophy wall by increasing the amount of legal documents necessary to gather 
information? Law enforcement should not be further hindered during their inves- 
tigation of time sensitive cases that involve the threat of serious bodily harm or 
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death by imposing additional legal hurdles may very well jeopardize the lives of 
countless innocent Americans. 

This legislation is a pale attempt to build on the 2012 Jones decision rendered 
by the U.S. Supreme Court. The Supreme Court did not extend the Jones decision 
to cellular phones. Law enforcement is not seeking the “content” of a conversation, 
nor are we trying to step on someone’s expectation of privacy. We are simply looking 
at corporate records, just like financial records, to which a legally authorized sub- 
poena or court order will suffice. When a person places a phone call, the “content” 
of the call is protected, not the parking lot, sidewalk or location from which it was 
placed. The proposed legislation would, under Rule 41 of the Federal Rules of Crimi- 
nal Procedure, make “content” and “geolocational information,” such as cell-site and 
EZ-Pass, rise to the same standard. FLEOA would opine that these two types of 
information do not enjoy the same level of expectation of privacy. 

While our membership respects the constitutional rights of all citizens, we do not 
want to see the United States adopt unnecessary legislation. If our country’s laws 
allow for the disclosure of corporate records pursuant to legally authorized court or- 
ders or subpoenas, the same standard should apply to all corporate records, to in- 
clude communication companies. Geolocation communication information/records 
should be treated no differently. We hope your committee understands ELEOA’s 
concern with the proposed legislation and respects our position. 

I would like to thank the Committee Members for your continued support of law 
enforcement and its mission and for this opportunity to testify today. I will be happy 
to answer any questions that you may have at this time. 


Mr. Sensenbrenner. Mr. Cassilly. 

TESTIMONY OF JOSEPH I. CASSILLY, PAST-PRESIDENT, 
NATIONAL DISTRICT ATTORNEYS ASSOCIATION 

Mr. Cassilly. Thank you, Chairman Sensenbrenner Ranking 
Member Scott, Members of the Committee. The National District 
Attorney’s Association is the oldest and largest organization rep- 
resenting State and local prosecutors in the United States. 

Obtaining geolocation information is not a search, but even if it 
were a search, obtaining a warrant is not required for a lawful 
search when the circumstances of getting the warrant would be un- 
reasonable or frustrate the lawful purposes of the government. 
Thus, there are legal searches that are recognized by the court that 
do not require probable cause. NDAA has serious concerns that 
H.R. 2168 would unreasonably frustrate State or local law enforce- 
ment’s ability to effectively protect the citizens we serve. 

NDAA believes it is necessary to distinguish between historical 
data compiled from cell tower hits and real-time GPS ping informa- 
tion. The overwhelming majority request for geolocation data in my 
jurisdiction are for historical data. These requests are often made 
to confirm or rebut information which does not meet the probable 
cause standard. For example, in a gang shooting in my jurisdiction, 
an anonymous caller who states they fear gang retaliation gives 
the police the identity of two gang members who committed the 
murder; the police get information about the suspects’ cell phones 
from prior arrest reports. The cell site historical information for the 
time of the killing shows that those two cell phones were hitting 
off the same tower at the same time in the area of the murder. 
Even without this information, the police do not have probable 
cause to arrest, but they have at least allowed the ability to focus 
their investigation. 

Gangs are domestic terrorists. Denying law enforcement the abil- 
ity to use this critical tool is to decide to refuse to protect those 
communities. Section 2602(d) of the law, exception for consent, al- 
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lows for a parent or guardian to consent to a child’s device location, 
but is silent as to whether such consent is available with those 
with mental handicaps, developmental disability, dementia or who 
may be on medication. And further, if a child is reported missing 
by their peers but the parents can not be located, do the police 
waste precious seconds hunting for the parents or use those sec- 
onds to hunt for the child? 

The bill is confusing, 2602(f), exception for emergency informa- 
tion, has a different standard for law enforcement officer to access 
information when — than does 2604 emergency situation exception, 
including the fact that one requires a subsequent order while the 
other does not. The emergency exceptions are vague on what infor- 
mation can be legally obtained. 

Do these exceptions allow, for example, in a kidnapping case for 
law enforcement attract the kidnappers’ phone or only the victim’s 
phone? It is important to note that the ability to gather GPS infor- 
mation lasts only so long as the battery continues to power the de- 
vice. Any unreasonable delay may result in a bad dead battery and 
frustrate the effort to use geolocation. 

Given that the proposed law subjects electronic communication 
service providers to possible criminal and civil liability if they co- 
operate with an officer, the laws should provide a course of action 
that would enable rapid transfer when needed, and possibility pen- 
alties for service providers who are intentionally slow to respond in 
providing critical law enforcement information. 

State statutes and court rules impose additional burdens on the 
use of warrants that may be unintended or unforeseen by this 
Committee. For example, in Maryland, law enforcement officers are 
required to deliver a copy of the warrants to the person being 
searched at the execution of the warrant. Is the person being 
searched the person carrying the phone? If so, we would have to 
locate them before we locate them in order to serve the warrant 
and give them the opportunity to turn off the device and flee. 

Maryland law enforcement are also required to deliver the state- 
ment of probable cause to the person searched at least 60 days 
after the warrant is issued. Generally these warrants are used at 
the end of an investigation, but often this information is needed at 
the beginning of the investigation. 

These are some examples of the unintended consequences from 
only one State, and imagine them compounded them in 50 States. 
We assert that this legislation is a solution in search of a problem, 
and is the true defenders of the public freedoms and rights, Amer- 
ica’s prosecutors believe that the current system of police discretion 
and judicial oversight is working. For if it were not, the evidence 
would be found in court cases challenging the conduct of the police. 

Thank you for the opportunity to testify before the Committee on 
this important legislation. 

Mr. Sensenbrenner. Thank you. 

[The prepared statement of Mr. Cassilly follows:] 
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The Founders of our Country in adopting the Fourth Amendment wanted to protect its citizens 
from unreasonable searches. Obtaining geolocation information from a third party has been 
determined not to be a search; although the U. S. Supreme Court may weigh in on that decision. 
Even if it is a search obtaining a warrant is not required for a lawful search when the 
circumstances of getting the warrant would be unreasonable or frustrate the lawful purposes of 
the government; ie. Search incident to arrest, search resulting from exigent circumstances or “hot 
pursuit”, search of a vehicle, among other recognized exceptions to the warrant requirement. 

NDAA has serious concerns with the potential impact that Fl.R. 2168, the Geolocational Privacy 
and Surveillance Act (GPS Act), would have on State or local law enforcement’s ability to most 
effectively and efficiently protect the citizens we serve. The GPS Act, as currently written, has 
been drafted so broadly that the bill would require a search warrant to gather many forms of 
information that can currently be obtained by subpoena. The new standards set through the GPS 
Act would hamper law enforcement’s ability to quickly obtain important information that could 
be used to save lives. NDAA feels that any legal reforms to the current system should be 
implemented to shorten the investigative timeline instead of lengthening it, which we feel would 
be an unintentional consequence of the GPS Act. NDAA believes that any bill that hinders law 
enforcement from doing its job most effectively would lead to serious consequences for crime 
victims and public safety. Because so many cases are time sensitive in nature - including child 
abductions, other fonns of kidnapping and organized criminal and/or terrorist activities - law 
enforcement must be able to work these cases without unnecessary administrative delay. 
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NDAA believes it is imperative to distinguish between historical data compiled from cell tower 
hits, referred to as cell-site information and real time GPS ping information. The overwhelming 
majority of the requests for geolocation data in my jurisdiction are for the historical data. These 
requests are often made to confirm or rebut information which does not meet the probable cause 
standard. For example, in a gang shooting in my jurisdiction an anonymous caller who states 
they fear gang retaliation if their identity is known gives the police the identity of two gang 
members who committed the murder. The police receive cell phone information regarding these 
individuals from prior arrest reports. The cell-site historical information for the time of the 
killing shows that those two cell phones were hitting off the same tower at the same time in the 
area of the murder. Even with this information, the police do not have probable cause to arrest 
but to require probable cause to access historical records would have deprived the officers of this 
vital information. Gang crimes are domestic terrorism which rules with fear, silences witnesses 
and deprives whole communities of life and liberty. Denying law enforcement the ability to use 
this critical tool is to decide to refuse to allow America’s communities to protect themselves 
from the scourge of gangs. 

In section 2602 (d) “Exception for Consent” allows for a parent or guardian to consent to a 
child’s device location but it is silent as to whether such consent is available for those with 
mental handicaps, developmental disabilities, dementia or who may be on medication. Also, 
what if a child is reported missing by their peers but parents or guardians cannot be located? Do 
the police waste precious seconds hunting for the parents or use those seconds to hunt for the 
child? 


3 



32 


Evidence of the confusion this bill will cause is obvious from the fact that section 2602 (f) 
“Exception for Emergency Information” sets a different standard for a law enforcement officer to 
access geolocation information than does section 2604(a)(1)(A) “Emergency Situation 
Exception”, including the fact that one section does not require a subsequent order while the 
other does. While NDAA does appreciate the “Emergency Situation Exception” contained in 
section 2064(a) of the GPS Act, we also feel the bill as currently written leaves too much of a 
grey area on what geolocational information can be legally obtained by law enforcement in such 
emergency situations. For example, the exception allows for interception of geolocation 
information when “such officer reasonably determines that an emergency situation exists that — 
involves — immediate danger of death or serious physical injury to any person;” It is unclear, 
however, whether this exception would permit interception of geolocation information relating to 
others - such as the perpetrator of a crime - or only information relating to the person whose life 
or safety is threatened. Take a kidnapping case, for example; it is currently unclear whether law 
enforcement could use this exception to track the kidnapper’s phone or only the victim’s phone 
or other electronic devices belonging to the victim. It is also important to point out that the 
ability to gather GPS infonnation lasts only so long as the battery continues to power the device. 
Stopping to investigate to gather information or draft a warrant or find a Judge may exhaust the 
battery and frustrate the effort to use geolocation. 

It may not be clear at first whether a missing person is in danger or just out of touch and yet 
frantic relatives often demand that law enforcement use every opportunity to locate that person. 
Given that the proposed law subjects electronic communication service providers’ employees to 
possible criminal and civil liability if they cooperate with an officer, as well as loss of their job if 
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the employer wishes to separate itself from an employee’s decision, the employee might 
challenge the officer’s determination that an exception to the warrant requirement exists. 

If Congress chooses to elevate the standard for location evidence to probable cause, law 
enforcement will be forced to adapt to these changes and such changes would extend the 
investigative timeline and decrease the number of leads law enforcement can pursue in a given 
time period. Additionally, with deep cuts in federal spending to important State and local law 
enforcement programs over the past several years - including to COPS, Byme-JAG, Byrne 
Competitive and cuts to information sharing programs like the Regional Information Sharing 
System (RISS) - law enforcement has been forced to do more with less; the GPS Act would seem 
to present yet another burdensome obstacle for State and local law enforcement to overcome in 
order to effectively protect and serve. 

State statutes and court rules impose additional burdens on the use of warrants. For example in 
Maryland, law enforcement officers are required to deliver a copy of the warrant to the person 
being searched at the execution of the warrant. Is the person being searched the person carrying 
the phone? This means that the target of the investigation would be alerted to the investigation 
and afforded an opportunity to intimidate witnesses, destroy evidence, turn off the wireless 
communication device and flee. In addition Maryland law enforcement is required to deliver the 
statement of probable to the person searched at least sixty days after the warrant is executed; 
therefore, warrants in Maryland generally come at the conclusion of the investigation, but most 
law enforcement needs geolocation information at the beginning of the investigation. 
Additionally, on weekends, holidays and evenings law enforcement may use hours trying to 
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locate a judge and another hour driving to their location with the warrant. These are just some 
examples from one of fifty states and several territories of how the Federal requirement of a 
warrant translated to the States will result in uncounted obstacles and frustrate or destroy law 
enforcement efforts. 

Whatever level of investigative process is deemed appropriate by the Congress, NDAA urges the 
Committee to take steps to guarantee that law enforcement is able to access the required 
communications records - including location information - once that process is implemented. 
The emergency exceptions outlined in section 2602(f) of the GPS Act may provide the necessary 
recourse but if there is no statutory mandate for a service provider to turn over the records, and 
no time frame for compliance, law enforcement may effectively be denied the information we 
need despite being in accordance with the legal process. The law should provide a course of 
action that will enable the rapid transfer of information when needed and possibly provide 
penalties for service providers who are intentionally slow to respond in providing critical 
location information. 

NDAA appreciates the privacy concerns of America’s citizens and strives for all of America’s 
State and local prosecutors to minimize unnecessary intrusions into citizen’s privacy. While 
there are countless articles expressing concern about the amount of location evidence obtained 
by law enforcement and private companies, not a lot has been publicized about the good that has 
come from the proper use of location evidence by law enforcement to solve crimes and to save 
lives. There are literally thousands of instances where the proper gathering and use of this 
important evidence has led to the rescue of abducted children, the identification and prosecution 
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of sexual predators, and the apprehension and conviction of a terrorist looking to harm innocent 
Americans. We assert that this legislation is a solution in search of a problem and as the true 
defenders of the public’s freedom and rights America’s prosecutors believe that the current 
system of police discretion and judicial oversight is working; for if it were not the evidence 
would be found in cases challenging the conduct of the police in the Courts. 

Chairman Sensenbrenner, Ranking Member Scott, members of the Subcommittee, 1 appreciate 
the opportunity to testify before you on this important legislation and will answer any questions 
which you may have. 
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Mr. Sensenbrenner. Mr. Black. 

TESTIMONY OF EDWARD J. BLACK, PRESIDENT AND CEO, 

COMPUTER & COMMUNICATIONS INDUSTRY ASSOCIATION 

Mr. Black. Mr. Chairman, Members of the Committee, thank 
you for the opportunity to testify today on the GPS Act. CCIA is 
an international trade association dedicated to innovation and dy- 
namic open competition with members in many technology sectors. 
Our members employ half a million workers with annual revenues 
of a quarter of a trillion dollars. CCIA is also a founding member 
of the Digital Due Process coalition formed to update ECPA. 

The GPS Act addresses one key coalition recommendation for up- 
dating ECPA. Extending Fourth Amendment protections to reflect 
the realities of the digital age is an important goal for our industry. 
Regardless of motivation, the new found — the recent Supreme 
Court decision in Jones called into question whether pervasive new 
technology received Fourth Amendment protection. Jones did not 
reach the question of protection for personal location information 
generated by mobile devices. Despite unanimous discomfort among 
the judges over warrantless tracking of individuals, Jones failed to 
include devices owned by over 95 percent of the U.S. population. 
Thus, authorities may now choose to replace physical tracking de- 
vices with pervasive and unchecked monitoring of our whereab^outs 
via either private cell phone networks or GPS information built 
into our phones. 

Representative Goodlatte and Chaffetz’s GPS Act is an important 
step toward closing the 21st century loophole in ECPA. Requiring 
probable cause to justify intrusive surveillance may make the life 
of law enforcement agents slightly more difficult, but that was the 
explicit purpose of our Founders when they expressly limited the 
government’s powers under the Fourth Amendment. 

Mobile technologies are transforming and benefiting our econ- 
omy. The mobile industry contributed 195 billion to our GDP, and 
3.8 million jobs in 2011 alone. Trust is essential to this dynamic 
part of our economy, particularly where data is concerned, this is 
why the GPS Act is so vital. 

Your location privacy says a great deal about you. It says where 
you work and sleep, your religious preferences, doctor visits and po- 
litical affiliations. All are personal information with a legitimate 
claim to privacy. Current warrant protection against location infor- 
mation does not clearly apply to all GPS or cell site information. 
There is uncertainty in the business community about what the 
law is, for each type of data and what privacy assurances can be 
made to users. This uncertainty itself hampers innovation and the 
growth of companies and the Internet platform and cloud services 
sectors. 

Problems of trust are exacerbated because there is rarely consent 
from the cell phone user when the government demands informa- 
tion from companies. In this nascent marketplace, we need a clari- 
fying law requiring a warrant before law enforcement may demand 
personal location information from the electronic service providers. 
The GPS Act creates a uniform warrant standard for government 
demands of location data. It gives assurances to all users that the 
location information will be reasonably protected under the law. 
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This is vitally important as many new applications such as Yelp 
and Four Square incorporate real-time user information. This bill 
does not make this information off limits to government entities 
which would simply need to obtain a warrant, justas it must be 
done to access many other types of evidence under law and the 
Constitution. 

This bill also recognizes that there are circumstances in which 
obtaining a warrant may be too time consuming or inappropriate. 
This bill would not keep law enforcement from doing its job. 

In summary, we believe that the changes made by the GPS Act 
are vital to the privacy and civil liberties of Americans, and for the 
positive effects it would have on an exciting and booming sector of 
our economy. Thank you for the opportunity to testify today. I look 
forward to your questions. 

Mr. Sensenbrenner. Thank you, Mr. Black. 

[The prepared statement of Mr. Black follows:] 
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Mr. Chairman, Ranking Member, and Members of the Subcommittee: 

Thank you for the invitation to testify before you today on the important issue of 
geolocation privacy. CCIA is an international non-profit trade association dedicated to 
open markets, open systems, and open networks. CCIA members participate in many 
sectors of the computer, information technology, and telecommunications industries and 
range in size from small entrepreneurial firms to some of the largest in the industry. In 
particular, we have a number of members involved in the mobile industry. Our members 
employ nearly half a million workers and generate approximately a quarter of a trillion 
dollars in annual revenue.^ 

Our industry occupies a unique position in the global marketplace. More than 
any other industry, it connects and empowers users. It helps educate, entertain, and erase 
distance. It serves as a powerful force for good in the global marketplace. At the same 
time, information generated by communication services can be misused by governments. 
In addition to posing a grave threat to civil liberties, this misuse will impair adoption and 
growth of ICT services. Thus, our constitutional values and our economic interests align, 
and point inexorably to the conclusion that a judicial warrant, founded upon probable 
cause, must accompany any law enforcement demands for private individuals’ location 
information. 


’ For a complete listing of CCIA members see htt]t://www. ccianet.org/members. 
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My testimony makes five points: First, geolocation privacy is a civil liberties 
imperative. The privacy concerns and Constitutional beliefs of the nation strongly 
support warrant protection for location information. Where a person is located in relation 
to society - their interactions, their associations, their sense of being a free citizen - this 
information is the very essence of personhood. To cede to government the unchecked 
power to track you wherever you are is to lay the cornerstone of the surveillance state. 

As the D.C. Circuit noted in its opinion in United States v. Maynard, location data reveals 
information about a person that would shock the average American, and it can do it for 
numerous surveillance targets, from the comfort of an air conditioned office. There can 
be no question that, as the court mMaymard decided, Americans have a reasonable 
expectation of privacy in their whereabouts.^ The law should close the loophole in ECPA 
that was inadvertently created by new geolocation technology. Otherwise the intent of 
the original law as well as this reasonable expectation of privacy in one’s whereabouts 
will be undermined. 

Second, there is also an important business interest in location privacy. Mobile 
telephony and mobile Internet access are some of the fastest growing sectors in our 
national economy. Mobile penetration itself has grown at an incredible rate, and 
smartphones in particular continue to grab new users all the time. Mobile technology 
promises to improve lives in many ways and geolocation-aware devices and apps in 
particular offer a renaissance for users. 

Third, many constituencies, from low-income and minority users, to many 
professionals, increasingly depend on mobile technology. For many, mobile devices arc 
either the only means of accessing the Internet, or an indispensable tool in the workplace. 

Finally, decreasing the trust that people have in the devices they use will have a 
meaningful impact on how those people interact in society and in business in the future. 
Trust is the most essential question when looking at the uptake of a new technology, 
particularly where data is concerned. This is why the GPS Act as introduced by 
Representatives Goodlatte and Chaffetz is so vital. Today, many users are aware that 
their smartphones have the capability to track their movements and, thanks to press 
surrounding the U.S. v. Jones case from last year, know that, at least for the time being, 

" r/niled Slale.s v. Maynard, 615 F. 3d 544, 56.3-64 (DC Cir. 2010). 

U. Black TesLimony, May 17,2012 Page 2 of 9 
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cell-site location data may not have the protection of a warrant. That knowledge impedes 
trust, and the GPS Act would send a clear signal that geolocation information collected 
through the use of cell phones will be respected and protected against government 
intrusion at the highest level. 

I. Civil liberties of Americans demand the protection of location data. 

Basic Fourth Amendment considerations call for the protection of location data 
just as we protect the content of letters and files within the home. The prevailing test for 
protection under the Constitution leads to the conclusion that the movement of people 
over time is information that the average American views as private data. To the extent 
that the courts have not embraced that rationale, Congress can and should step in to 
preserve location privacy rights. 

The question of Fourth Amendment privacy rights in location information was 
raised most recently in a case that arose in Washington, DC. Police placed a GPS 
tracking device on the car of a suspected drug dealer without following proper warrant 
procedures, and the data gathered was challenged at trial.^ The DC Circuit Court of 
Appeals issued a thoughtful opinion that came to the conclusion that people have a 
reasonable expectation of privacy in the collected history of their location information.'* It 
can reveal intimate infomiation about a person, including religion, political affiliation, 
health issues, and a host of other private details.*" CCIA wholly agrees with this analysis. 

The Supreme Court took a much narrower view when they heard the case, 
however. While they upheld the ruling, the majority opinion’s theory was focused on the 
trespass that occurred when police placed the GPS receiver on the suspect’s car.* This 
ruling certainly answered the question before the court, but left many other questions 
unanswered. It was not decided, for example, whether cell-site location information is 
similarly protected. 

These questions are all the more unsettling because the government may misuse 
its powers in the name of preventing crime. The framers knew this reality well, and it is 


’ Id. at 549. 

*Id. at 563-64. 

' Id. at 562. 

Unded Slates v. .lones.^ 565 U.S. , slip op. at 4 (2012). 
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the genesis of the Fourth Amendment. Congress also appreciated the concern when it 
passed the Electronic Communications Privacy Act in 1 986. Tt is now past time to clarify 
ECPA standards in response to new technology in several areas and geolocation 
information is one of them. CCIA agrees with the DC Circuit that the Fourth 
Amendment properly read protects all location data, but people’s civil liberties need not 
wait on the courts. Congress has the ability to make sure that fundamental rights are not 
trampled on by a well-meaning but overreaching law enforcement, and the GPS Act 
would go a long way toward achieving that goal. 

II. Economic considerations demand protecting location data. 

A. Mobile technoloKV is revoliilionizins our economy. 

Over the past decade mobile technologies have proven to be one of the most 
transformative of the information age. Their effects have been felt in everything from 
local emergency response to the fall of dictatorships.’ Studies have linked mobile 
penetration to growth in GDP, particularly noting the network effects that increase GDP 
growth when penetration grows above 25%.* 

The economic benefits of mobile access are hard to argue with. The mobile 
industry accounted for $195.5 billion in contribution to GDP and 3.8 million jobs in 201 1 
alone.’ These numbers don’t take into account the monetary benefits to mobile users who 
are better able to find what they’re looking for, conduct business when traveling, and who 
gain numerous other advantages. 

Nor do these studies address the non-monetary impact of mobile technologies. 
There are plenty of non-quantifiable, yet nonetheless important, benefits to mobile users. 
From family members quickly and easily able to let everyone know about a birth in the 
family, to checking the lyrics of that song you’ve had stuck in your head all day, all the 
way to being able to meet up with friends at the State Fair, mobile phones enable a host 
of desirable effects. 

' Jamila Boiigliclaf. A/o6/7e phones, social media, and the Arab Spring. April 2011. Tim Large. Cell phones 
and radios help save lives after Haiti earthquake Reuters, Jan. 25, 2010. 

^ Kathuria el a!., 2009. 

Press Release, Wireless Industiy A Catalyst For U.S. Economic Growth. Supporting 3.8 Million Jobs And 
Adding S195.5 Billion To GDP In 2011, (Trhttp://www.pmcwswirc.com/ncws-rclcascs/wirclcss-industr}'-a- 
calalysl-ibr-us-economic-grovvlh-supporling-38-million-johs-and-adding-1955-billion-lo-gdp-in-201 1- 
149649095.html 
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In the past few years, the effects of the mobile revolution have been compounded 
by the rise of smartphones, giving access to computational power that only would have 
been available in a desktop computer just few years ago, in a form factor that fits in a 
pocket. Access to the Internet at the push of a button has changed how we communicate 
but also how we work, shop, travel, and play. This market has shown its power, shipping 
144.9 million smartphones in the first quarter of 2012, and proving to be a bright spot in 
an otherwise somber economic outlook.'” 

In addition to being a booming business of its own, mobile and smartphones 
enable other businesses. The marketplace for smartphone apps has exploded in the past 
few years, for example. The small applications that run on smartphones can be useful, 
such as maps or educational tools, or amusements to kill time, such as music players, 
games, and social networking. In any case, they are often simpler to program than their 
equivalents on computers, and an industry of small businesses and independent 
developers has risen to create this new marketplace. 

B. Geolocalion is cm importanl piece of this markelplace. 

One particularly appealing piece of the smartphone market is the potential for 
geolocation-enabled apps. Through a number of different means, including the use of 
global positioning satellites (GPS) and cell-site location infomiation, smartphones are 
able to detemiine their own location with considerable accuracy. 

The device’s ability to know its own precise location enables a wide variety of 
exciting services. Turn-by-turn directions arc an obvious usage, but the possibilities go 
far beyond that. Apps can provide reviews of and coupons for nearby establishments, let 
you know when friends are nearby, and more. Despite their usefulness, however, only 6% 
of Americans use geolocation aware apps, and 70% of users are completely unaware that 
they exist" 


IDC Press Release, IVorldwide Sinarlphone Market Conlhmes to Soar, Carrying Samsung Into the Top 
Position in Total Mobile Phone and Smartphone Shipments, According to IDC, May 1, 2012, at 
littp://mvw.idc.coiii/gctdoc.jsp?coiitaiiicrId=prUS23455612 

Liz Cannes, Checking in Frotn the Cutting Edge: Only Six Percem Use (Jeolocafion Apps, Dec. 6, 201 1, 
http://allthingsd.com/201 1 1 206/checking-in-froin-the-cutting-edge-onlv-6-percent-use-geolocation-apps/ 
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Users also often express uncertainty, however, regarding the privacy of their 
geolocation information when asked about location-aware apps.’^ Location privacy is of 
the utmost importance, because of the depth of details about a person that can revealed. A 
trace of a person’s comings and goings over the course of a week can show not just 
where they work and sleep, but also religious preferences, doctor visits, political 
afFiliations, and many other pieces of personal infomiation.^^ 

The potential for abuse that comes with this information means that the trust of 
the user is of the utmost importance if this market is to grow and reach its fullest 
potential. CCIA believes that companies must treat geolocation information with the 
highest respect when it is gathered from users. Companies, however, can only control 
their own data practices. The same problems of trust in the platform arise when it is the 
government demanding information. This is why it is so important to this nascent 
marketplace that Congress pass a law requiring a warrant based on probable cause before 
law enforcement may demand location information about a person. 

TIT. Several constituencies depend heavily upon mobile technologies. 

The issues surrounding trust in location information are exacerbated by the fact 
that for many minorities, low-income individuals, rural populations, and professionals, 
smartphones may be the primary (and in some cases only) means of accessing the 
Internet and the great possibilities and opportunities that exist online. Unfortunately, 
these groups are also precisely the ones with the least trust of government. The possibility 
is very real that knowledge of the ease with which the government can obtain location 
information is deterring some of these groups from accessing the Internet via 
smartphones. 

Broadband access in the United States is expensive and slow as compared to the 
rest of the world. ''' In many mral areas, in fact, landline broadband Internet is still not 
available at any price. For those who cannot afford or access landline broadband, 

Louise Barkuus and Anind Day, Location-Based Services for Mobile Telephony: a Study’ of Users ’ 
Privacy Concerns, July 2003. 

’ ’ United States u. Maynard, 615 F.3d 544, 562 (DC Cir. 2010). 

Saul HansclL The Broadband. Gap: Why is Theirs Faster?, N. Y. Times, Mar. 10, 2009. 

FCC, High-Speed SenTceslbr Inlemel Aecess: SLalus as orDecemher 31, 2008 (2010), at 
http://lirauntbss.fcc.gov/edocs_public/attachTnatch/DOC-296239Al .pdf 
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smartphones have become the only available means of reaching the Internet. While it is 
excellent that smartphones provide this service to those who would otherwise not have a 
means of Internet access, this limitation also presents problems with government 
surveillance. 

The problem arises because those very groups that benefit in this way from 
smartphones have long standing reasons to be suspicious of government surveillance. 
These anxieties, valid or not, will affect the uptake of smartphones. This effect is likely to 
particularly affect potential smartphone users because the idea that a phone can carry 
geolocation information is much more obvious in a smart^how (as opposed to a feature 
phone, which can be located by cell-site data just as easily, but which is not transparent 
about the fact). It is likely that the perception of a lack of privacy against government 
intrusion affects the trust that potential smartphone users will place in the platform. If 
they perceive that the device will make it easier for the police to track their movements, 
they will forego using the device. Unfortunately, in many cases that also means they they 
will forego access to the Internet entirely, along with the economic and social benefits 
that come with access. 

For many professionals, including members of Congress and their staff a mobile 
device is necessity of life. In many other cases as well, the modern technology-enabled 
workplace demands its use. Thus, even those who might forfeit the empowering 
technology of mobile communications to escape an umbrella of perpetual surveillance 
cannot do so because of the demands of their job. 

IV. Trust is fundamental for growth and the current law undermines it. 

The situations described above hold true across the nation. As businesses across 
the Internet industry know, the trust of users is essential when collecting information 
from them, and geolocation information is no different. New geolocation services have 
the challenge of convincing potential users that they will treat information about their 
location with respect. In short, they must convince the users to trust them. 

There are many things that companies can do to enhance that trust. Among other 
practices, they can and should be transparent with their users about the information they 
gather and how it will be used, give those users as much control as possible over whether 
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and when the information is collected, and protect the infonnation once it is in their 
hands. It is vital for the health of their business to make this effort, and it is industry best 
practice. 

The one thing a company that collects location data cannot promise, however, is 
that they will protect that information against warrantless snooping by the government. 
The current state of Fourth Amendment law gives warrant protection against location 
information collected through a physical trespass (i.e., placing a device on a suspect’s 
car), but not through cell-site information or information collected directly from a 
device’s GPS receiver."” There is therefore quite a bit of uncertainty amongst companies 
about what the law is for each type of data, and what promises they can make to their 
users. 

That uncertainty itself hampers innovation and the expansion of businesses. Any 
company seeking start-up funding for a business plan that involves location information 
faces an uphill battle trying to overcome the stigma of legal uncertainty in a related area. 
The same is true when trying to fonn business partnerships or trying to sell a business 
that has achieved some success. 

The same uncertainty has an even more important effect on user trust. Users who 
are nervous about the privacy of their information will be turned off by finding out that 
the company collecting that data either cannot say for certain when they will have to turn 
it over to law enforcement or will affirmatively do so even when the government does not 
have a warrant. 

V. The GPS Act can solve these problems. 

The bill proposed by Representatives Goodlatte and Chaffetz would solve these 
problems by applying a uniform standard for government demands of location data. By 
making that standard a warrant, it gives assurances to all users that their location 
information will be protected at the highest level under the law. This simple change 
would eliminate the uncertainty that exists in the location services industry and increase 
the trust that users place in the companies in that industry. 


United Slates v. Jones.^ 565 U.S. , slip op. at 1 1 (2012). 


Fi. Black TesLimony, May 17,2012 
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The GPS Act is a straightforward piece of legislation. While the Electronic 
Communications Privacy Act is itself complex and in need of reform in a broader sense, 
this bill would make some simple additions that ensure that the government must show a 
judge probable cause before it may demand either the present or past location of a 
suspect. This bill does not render this information completely off limits to government. 
Law enforcement would simply need to obtain a warrant, just as it must do to access 
many other types of evidentiary personal information under the law and the Constitution. 

The bill is also balanced. It recognizes that there are circumstances in which 
obtaining a warrant may be too time consuming or inappropriate. Exceptions are 
provided for cases of emergency, the consent of the user, and instances of foreign 
intelligence gathering. In this way the proposal does not attempt to put law enforcement 
in a straitjacket that prohibits the government from doing its job. 

We believe that the changes made by the GPS Act are vital both for the privacy 
and civil liberties of Americans and for the positive effects it would have on an exciting 
and booming sector of our economy. T thank you for the opportunity to testify today, and 
T look forward to answering your questions. 


r^. Black TesLimony, May 17,2012 
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Mr. Sensenbrenner. Ms. Crump. 

TESTIMONY OF CATHERINE CRUMP, STAFF ATTORNEY, 
AMERICAN CIVIL LIBERTIES UNION (ACLU) 

Ms. Crump. Good morning, Chairman Sensenbrenner, Ranking 
Member Scott, and Members of the Subcommittee. Thank you for 
the opportunity to testify on behalf of the American Civil Liberties 
Union. The ACLU supports passage of H.R. 2168, the Geolocational 
Privacy and Surveillance Act. Requiring law enforcement agents to 
obtain a warrant based upon probable cause before obtaining 
geolocational information would allow legitimate law enforcement 
investigations to proceed, while ensuring that innocent Americans 
do not have their privacy intruded upon. 

As Congressman Chaffetz has already pointed out, passing the 
GPS Act would fulfill Congress’s duty to ensure that the safeguards 
provided by the Fourth Amendment of our Constitution are re- 
spected. 

Geolocational information implicates strong privacy interest be- 
cause tracking people’s movements makes it possible to learn a 
great deal of personal and private information about them. As Jus- 
tice Alito explained, society’s expectation has been that law enforce- 
ment agents and others would not and indeed in the name simply 
could not secretly monitor and catalogue every single movement of 
an individual’s car for a very long period. 

The D.C. Circuit Court of Appeals expanded upon this point. A 
person who knows all of another’s movements can deduce whether 
he is a weekly churchgoer, a heavy drinker, a regular at the gym, 
an unfaithful husband, an outpatient receiving medical treatment, 
an associate of particular individuals or groups and not just one 
such facts, but all such facts. 

Attaching a GPS device to a vehicle is one way of obtaining loca- 
tion information. In the recent Supreme Court case United States 
V. Jones, the police tracked a defendant’s movement continuously 
for 28 days with an accuracy of 50 to 100 feet. While some cell 
phones can also be tracked using GPS, all cell phone generate a 
continuous stream of location information because they register 
their location with cell phone networks several times a minute. 
Due to the proliferation of cell phone towers and advances in tech- 
nology, it is the case that, as Professor Matt Blaze has pointed out 
to Confess in previous testimony and again today, it is becoming 
increasingly precise, and in some cases, cell site information is ap- 
proaching the precision of GPS. 

While the Supreme Court held in Jones that affixing a GPS de- 
vice to monitor the movements of a car implicates the Fourth 
Amendment, it did not reach the question of whether that is a 
search that requires a warrant based upon probable cause. It will 
likely take years for this question to reach the Supreme Court once 
again. Congress should not stand by while law enforcement faces 
unclear standards for geolocation tracking and innocent Americans’ 
privacy is invaded. 

The warrant and probable cause requirement are essential com- 
ponents of the Fourth Amendment. The probable cause require- 
ment is not high. Law enforcement merely has to have a good rea- 
son to believe that a search will turn up evidence of wrongdoing. 
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These requirements are especially important today given the tre- 
mendous technological developments of the past 10 years. More- 
over, major telecommunication companies and Internet companies 
support a warrant and probable cause requirement. 

Last August in an unprecedented effort to penetrate the secrecy 
surrounding cell phone tracking, 35 ACLU affiliates in 32 States 
filed over 380 Public Records Act requests to understand the poli- 
cies procedures and practices of local law enforcement agencies for 
tracking cell phones. What we learned was disturbing. While over 
200 of the agencies — while virtually all of the 200 agencies that re- 
sponded indicated that they track cell phones, only a tiny handful 
indicated they had obtained warrants to do so. And many only com- 
ply with a lesser standard, such as a subpoena. The law governing 
location tracking policy should be clear, uniform, and protective of 
privacy, but unfortunately it is in a state of chaos with agencies in 
different towns following different rules, and in some cases, no 
clear rules at all. 

The ACLU supports passage of the GPS Act because it would en- 
sure that law enforcement agents obtain a warrant based upon 
probable cause in order to track — obtain geolocational information. 
The Act also includes perfectly reasonable and limited exceptions. 
Under the Act, for example, the police would be able to obtain loca- 
tion information when they had a good reason to believe that it 
would turn up evidence of wrongdoing, or where they have a good 
faith to believe that someone’s life or safety was in jeopardy. 

We urge the Committee to support H.R. 2168 and report it favor- 
ably from the Committee. Thank you. 

[The prepared statement of Ms. Crump follows:] 
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Good morning Chairman Sensenbrenner, Ranking Member Scott and Members of 
the Subcommittee. Thank 5 'ou for the oppormnity to testify on behalf of the American 
Civil Liberties Union, its more than half a million members, countless additional activists 
and supporters, and fifty-three affiliate organizations nationwide. 

The ACLU supports passage of H.R. 2168, the Geolocational Privacy and 
Surveillance Act. Requiring law enforcement agents to secure a wairant based upon 
probable cause before obtaining geolocational information would allow legitimate 
investigations to proceed, while ensuring that innocent Americans are protected from 
intrusions into their privacy. Passing the GPS Act would fulfill Congress’s duty to ensure 
that the safeguards provided by the Fourth Amendment to the Constitution are respected, 
and it would allow Americans to preserve the privacy they have traditionally 
experienced, even as technology advances. 

I. Introduction 

GPS and cell site technology provide law enforcement agents with powerful and 
inexpensive methods of tracking individuals over an extensive period of time and an 
unlimited expanse of space as they traverse public and private areas. In many parts of the 
countiy, the police have been tracking people for days, weeks, or months at a time, 
without ever having to demonstrate to a magistrate that they have a good reason to 
believe that tracking will turn up evidence of wrongdoing. Today, individuals’ 
movements can be subject to remote monitoring and permanent recording without any 
judicial oversight. Innocent Americans can never be confident that they are free from 
round-the-clock surveillance by law enforcement of their activities. As Justice Sonya 
Sotomayor recently wrote, "The net result is that GPS monitoring-by making available 
at a relatively low cost such a substantial quantum of intimate information about any 
person whom the Government, in its unfettered discretion, chooses to track-may alter the 
relationship between citizen and government in a way that is inimical to democratic 
society.”’ 

Congress should pass the GPS Act to require law enforcement agents to secure a 
wai'rant based upon probable cause before obtaining geolocational infoimation through 
GPS or cell site technology. The warrant and probable cause requirements, enshrined in 
the Fourth Amendment, ensure that an objective magistrate weighs the need to invade 
privacy when enforcing the law. Requiring a warrant would fulfill Congress’s obligation 
to ensure that the Fourth Amendment’s prohibition on unreasonable searches and seizures 
is respected. Americans’ privacy rights are tlireatened by warrantless access to 
geolocational information, and history teaches that the executive cannot be counted upon 
to police itself. The need for the GPS Act is real and immediate, and we urge its passage. 


’ United States v. Jones, 132 S. Ct. 945, 956 (2012) (Sotoma 3 'or, J concurring). 
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II. Current Technologies Allow for Detailed Tracking of Americans’ 

Movements. 

Recent technological developments make it possible to obtain geolocational 
information about the vast majority of Americans with great precision, in both real time 
and historically, regardless of whether they are tracked through their cell phones or their 
vehicles, or whether the police obtain GPS or cell site data. 

A. Tracking Cell Phones 

Over the past decade, cell phones have gone from a luxury good to an essential 
communications device. As of December 2011, there were more than 31 1.6 million 
wireless subscriber accounts in the United States — a number greater than the total U.S. 
population.^ While cell phones are best known as devices used to make voice calls and 
send text messages, they are also capable of being used as covert tracking devices. As a 
result, cell phone technology has given law enforcement an unprecedented new 
surveillance tool. With compelled assistance from mobile phone carriers, the U.S. 
government now has the technical capability to covertly track any one of the nation’s 
hundreds of millions of cell phone owners, for 24 hours a day, for as long as it likes. 

Cell phones yield several types of information about their users’ past and present 
location and movements: cell site location data, triangulation data, and Global 
Positioning System data. The most basic type of cell phone location information is “cell 
site” data or “cell site location information.” which refer to the identity of the cell tower 
from which the phone is receiving the strongest signal and the sector of the tower facing 
the phone. This data is generated because whenever individuals have their cell phones on, 
the phones automatically scan for nearby cell towers that provide the best reception; 
approximately eveiy seven seconds, the phones register their location information with 
the network,^ The carriers keep track of the registration information to identify the cell 
tower through which calls can be made and received. The towers also monitor the 
strength of the telephone’s signal during the progress of the call to manage the hand-off 
of calls from one adjacent tower to another if the caller is moving during the call.'^ 

The precision of cell site location information depends, in part, on the size of the 
coverage area of each cell tower. This means that as the number of cell towers has 
increased and the coverage area for each cell tower has shrunk, cell site location 
information has become more precise. 


‘ CTIA, Wireless Quick Facts, available at 
http://www.ctia.org/advocacy/research/index.cftn/aid/10323. 

’ In re the Application of the United States for an Order Directing a Provider of Elec. 
Commc’n Sene to Disclose Records to the Gov’t, 534 F. Supp. 2d 585, 589-90 (W.D. Pa. 
2008) (Lenihan, M.J.), rev’d on other grounds, 620 F.3d 304 (3d Cir. 2010). 

See Declaration of Heniy Hodor at 7 n.6, available at 
http://www.aclu.Org/pdfs/freespeech/ceHfoia_release_4805_001_20091022.pdf 
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The latest generation of cellular towers now may cover an area as small as a 
tunnel, a subway, a specific roadway, a particular floor of a building, or even an 
individual home or office.^ As consumers embrace data-hungry devices such as 
smartphones, the earners have installed more towers, each with smaller coverage areas. 
Further improvement in precision can be expected given the explosive demand for 
wireless technology and its new sendees, to the point that “[t]he gap between the 
locational precision in today’s cellular call detail records and that of a GPS tracker is 
closing, especially as carriers incorporate the latest technologies into their networks.”® 
As Professor Matt Blaze testified to Congress in June 2010, “[i]t is no longer valid to 
assume that the cell sector recorded by the network will give only an approximate 
indication of a user’s location.”^ 

In addition to cell site information, law enforcement agents can obtain location 
data at a high level of accuracy by requesting cell phone providers to engage in 
“triangulation,” which entails collecting and analyzing data of the precise time and angle 
at which the cell phone’s signal arrives at multiple cell towers. Current technology can 
pinpoint the location of the cell phone to an accuracy of within 50 meters or less anytime 
the phone is on, and the accuracy will improve with newer technology.* 

Finally, a cell phone that has GPS receiver hardware built into it can detennine its 
precise location by receiving signals from global positioning satellites. An increasing 
number of phones, particularly smartphones, contain such GPS chips, and over half of 
mobile subscribers are now smartphone users.^ Current GPS technology can pinpoint 
location when it is outdoors, typically achieving accuracy of within 10 meters.^® With 
“assisted GPS” technology, which combines GPS and triangulation, it is possible to 
obtain such accurate locadon information even when the cell phone is inside a home or a 
building. 

Government requests for cell site location information are usually of two types: 
historical cell site data, which can be used to retrace previous movements, or prospective 
cell site data, which can be used to track the phone in real time. The availability of 


Hearing on Electronic Communications Privacy Act Reform and the Revolution in 
Location Based Technologies and Services Before the Subcomm. on the Constitution, 
Civil Rights, and Civil Liberties of the H. Comm, on Judiciary, 1 1 1th Cong. (2010) 
(statement of Professor Matt Blaze at 5), available at 

http://iudiciarv.house.gOv/liearings/Ddf/Blazel00624.pdf: Thomas Farelv & Ken 
Schmidt. Cellular Telephone Basics: Basic Theory and Operation (2006), 
http://www.privateline.com/mt cellbasics/iv basic theory and operation/ 

® Statement of Professor Matt Blaze, supra n.5, at 13-14. 

’ Id. at 13. 

* Id. at 10. 

® Keith Flagstaff, Nielson: Majority of Mobile Subscribers Now Smartphone Owners, 
Time Techland (May 7. 2012), http://techland.tLme.eom/2012/05/07/nielsen-maioritv-of- 
mobile-subscribers-now-smaitphone-owners/ . 

'“statement of Professor Matt Blaze, supra n.5, at 5. 
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historical information and the length of time this information is stored depend on the 
policies of the cell phone company. According to an internal Department of Justice 
document, obtained by the ACLU through a public records act request, cell phone 
companies store their customers’ historical location information for significant periods of 
time: Verizon stores the cell towers used by a mobile phone for “one rolling year”; T- 
Mobile keeps this information “officially 4-6 months, really a year or more”; Sprint and 
Nextel store this data for “18-24 months”; and AT&T/Cingular retains it “from July 
2008.”" 


B. Tracking Vehicles 

Just as geolocation data can be gathered from cell phones, so, too, can it be 
gathered from vehicles. There are a number of ways this can be accomplished. As in the 
recent Supreme Court case United States v. Jones, the government can physically attach a 
GPS device to a car. In that case, law enforcement agents installed a GPS device on a 
vehicle and it remained there for 28 days. During this period, the GPS device allowed 
agents to track the location of the car at every moment. It had an antenna that received 
signals from satellites; the device used these signals to determine its latitude and 
longitude every ten seconds, accurately pinpointing its location to within 50-100 feet. 

Law enforcement agents connected that data to softwai'e that plotted the car’ s location 
and movements on a map. The software also created a comprehensive record of the car’s 
locations. 

However, law enforcement agents do not necessarily need to affix a GPS device 
to a car in order to track its movements. The increased prevalence of integrated car 
navigation systems may soon make even this minimal legwork unnecessary. See, e.g.. 
United States v. Coleman, No. 07-20357. 2008 WL 495323. at * 1 (E.D. Mich. Feb. 20, 
2008) (discussing issuance of court order requiring cai' navigation company to disclose 
location data to law enforcement). 

III. Tracking People’s Location Can Invade Their Privacy Because It Reveals a 

Great Deal About Them. 

Location tracking enables law enforcement to capture details of someone’s 
movements for months on end, unconstrained by tbe normal barriers of cost and officer 
resources. See United Slates r. Pineda-Moreno, 617 F.3d 1120. 1124 (9th Clr. 2010) 
(Kozinski. 1, dissenting from denial of rehearing en banc) (“The modern devices used in 
Pineda-Moreno’ s case can record tire car’s movements without human intervention — 
quietly, invisibly, with uncanny precision. A small law enforcement team can deploy a 
dozen, a hundred, a thousand such devices and keep track of their various movements by 
computer, with far less effort than was previously needed to follow a single vehicle.”). 


" U.S. Department of Justice, Retention Periods of Major Cellular Service Providers, 
available at https://www.aclu.org/cell-phone-location-tracking-request-response-cell- 
phone-company-data-retention-chart 
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In United States v. Jones, 132 S. Ct. 945, 954 (2012), the Supreme Court held that 
a Fourth Amendment search occurred when the government placed a GPS tracking 
device on the defendant’s car and monitored his whereabouts nonstop for 28 days. Id. at 
954. A majority of the lustices also stated that “the use of longer term GPS monitoring . . 

. impinges on expectations of privacy” in the location data downloaded from that 
tracker. Id. at 953-64 (Sotomayor, 1., concurring); see also id. at 964 (Alito. 1., 
concurring). As lustice Alito explained, “[s]ociety’s expectation has been that law 
enforcement agents and others would not — and indeed, in the main, simply could not - 
secretly monitor and catalog every single movement of an individual’s car, for a very 
long period.” Id, at 964 (Alito, 1,, concurring). 

lustice Sotomayor emphasized the intimate nature of the information that might 
be collected by the GPS surveillance, including “trips to the psychiatrist, the plastic 
surgeon, the abortion clinic, the AIDS treatment center, the strip club, the criminal 
defense attorney, the by-the-hour motel, the union meeting, the mosque, synagogue or 
church, the gay bar and on and on.” Id. at 955 (quoting People v. Weaver, 12 N.Y.3d 433, 
442 (N.Y. 2009)). While even the limited collection of geolocation information can 
reveal intimate and detailed facts about a person, the privacy invasion is multiplied many 
times over when law enforcement agents obtain geolocation information for prolonged 
periods of time. As the D.C. Circuit Conn of Appeals has observed, “[a] person who 
knows all of another’s travels can deduce whether he is a weekly church goer, a heavy 
drinker, a regular at the gym, an unfaithful husband, an outpatient receiving medical 
treatment, an associate of particular individuals or political groups — and not just one such 
fact about a person, but all such facts.” United States v. Maynard, 615 F.3d 544, 562 
(D.C. Cir. 2010), aff’dsuh nom. United States v. Jones. 132 S. Ct. 945 (2012). 

There have always been facets of American life that have been uniquely 
safeguarded from the intiiisive interference and observation of government. 

Geolocational surveillance threatens to make even those aspects of life an open book to 
government. As Justice Sotomayor pointed out in Jones, “Awareness that the 
Government may be watching chills associational and expressive freedoms. And the 
Government’s unrestrained power to assemble data that reveal private aspects of identity 
is susceptible to abuse.” Jones, 132 S. Ct. at 956 (Sotomayor, 1., concumng) (quotations 
omitted). 

While privacy rights are often conceptualized as belonging to individuals, they are 
also important because they ensure a specifically calibrated balance between the power of 
individuals on the one hand and the state on the other. When the sphere of life in which 
individuals enjoy privacy shrinks, the state becomes all the more powerful: 

The net result is that GPS monitoring— by making available at a 
relatively low cost such a substantial quantum of intimate 
information about any person whom the Government, in its 
unfettered discretion, chooses to hnck— may alter the relationship 
between citizen and government in a way that is inimical to 
democratic society. 
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Jones. 132 S. Ct. at 956 (Sotomayor, J., concurring) (quotations omitted). Chief Judge 
Kozinski of the U.S. Court of Appeals for the Ninth Circuit has elaborated on this critical 
point: 


T don’t think that most people in the United States would agree with the 
panel that someone who leaves his car parked in his driveway outside the 
door of his home invites people to crawl under it and attach a device that 
will track the vehicle’s every movement and transmit that information to 
total strangers. There is something creepy and un-American about such 
clandestine and underhanded behavior. To those of us who have lived 
under a totalitarian regime, there is an eerie feeling of deja vti. 

United States v. Ptneda-Moreno. 617 F.3d 1 120, 1 126 (9* Cir. 2010) (Kozinski, C.J., 
dissenting). See also United States v. Cuevas-Perez, 640 F.3d 272, 286 (7th Cir. 2011) 
(Wood, J,, dissenting) (“The technological devices available for [monitoring a person’s 
movements] have rapidly attained a degree of accuracy that would have been 
unimaginable to an earlier generation. They make the system that George Orwell 
depicted in his famous novel, 1984, seem clumsy and easily avoidable by comparison.’’). 

Furtheiinore, while the government routinely argues that records of a person’s 
prior movements deserve less privacy protection than records of where a person travels in 
real time, this is a meaningless distinction. As one judge has noted, “[tlhe picture of [a 
personj’s life the government seeks to obtain is no less intimate simply because it has 
already been painted.” In re Application of the U.S. for Historical Cell Site Data, 747 F. 
Supp. 2d 827, 840 (S.D.Tex. 2010) (citation omitted). A contrary conclusion would 
eliminate privacy protections even in real-time data, because police officers would be 
free to use GPS devices to record vehicles’ travels so long as they waited some minutes 
before accessing those records, thereby rendering them “historical.” 

IV. A Warrant and Probable Cause for Location Tracking is Vital to the 
Constitution and Innovation. 

While the Supreme Court held in .lones that affixing a GPS monitor and then 
tracking a suspect’s whereabouts for weeks constitutes a “search” within the meaning of 
the Fourth Amendment, it did not address whether it is the sort of search that requires a 
judicial wanant supported by probable cause. It will likely take years for this question to 
reach the Supreme Court again. Congress should not stand by as law enforcement faces 
confusion over tlie rules for obtaining location information and Americans’ privacy rights 
are violated. 

The warrant and probable cause requirements are essential components of the 
Fourth Amendment. The function of the warrant clause is to safeguard the rights of the 
innocent by preventing the state from conducting searches solely in its discretion: 

Absent some grave emergency, the Fourth Amendment has interposed a 
magistrate between tlie citizen and the police. This was done not to shield 
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criminals nor to make the home a safe haven for illegal activities. It was 
done so that an objective mind might weigh the need to invade that 
privacy in order to enforce the law. The right of privacy was deemed too 
precious to entrust to the discretion of those whose job is the detection of 
crime and the arrest of criminals. Power is a heady thing; and history 
shows that the police acting on their own cannot be trusted. 

McDonald v. United. States, 335 U.S. 451 , 455 (1948). 

The warrant and probable cause requirements are especially important here given 
the extraordinary intrusiveness of modern-day electronic surveillance. Without these 
requirements, the low cost of collecting and storing geolocational infoiination would 
permit the police to continuously track any driver and cell phone user. 

The warrant requirement imposes no great burden on the state. Under the GPS 
Act. obtaining warrants for geolocational information would be even less burdensome 
than obtaining them for telephone wiretaps, and the expectation of privacy implicated in 
placing calls on a public phone is no greater than the expectation that the state will not, 
absent a warrant, monitor a citizen’s every movement continuously for months on end. 

In addition congressional action to require a probable cause warrant for location 
tracking enjoys widespread support from companies and organizations from across the 
political spectrum including Amazon, the American Library Association, Americans for 
Tax Reform. AT&T, the Campaign for Liberty. Citizens Against Government Waste, the 
Competitive Enterprise Institute, the Center for Democracy and Technology. Consumer 
Action, eBay, Facebook, Freedom Works, Google, HP. IBM. the Information 
Technology & Innovation Foundation. Intel, the Liberty Coalition, the Newspaper 
Association of America. Salesforce.com, Tech America, Tech Freedom and Twitter.’^ 
This list demonstrates that many businesses agree that safeguarding location information 
is a necessity for American competitiveness and innovation. 

V. There Is a Need to Act, and Congress Is the Appropriate Branch of 
Government to Act. 

Congress cannot afford to wait any longer to enact a warrant and probable cause 
requirement for location tracking. Today Americans’ privacy rights are being violated 
routinely by invasive location tracking, particularly cell phone tracking. 

In August 2011, 35 ACLU affiliates submitted public records requests with state 
and local law enforcement agencies around the nation seeking information about their 
policies, procedures, and practices for tracking cell phones.''^ The ACLU received over 


A full list can be found here: 

htto://digitaiduenrocess.org/index.cfm?obiectid=DF652CE0-2552-1 1 DF- 
B455Q00C296BA163 

ACLU, Cell Phone Location Tracking Public Records Request, 
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5,500 pages of documents from over 200 local law enforcement agencies. The responses 
show that while cell phone tracking is routine, few agencies consistently obtain judicial 
warrants. The overwhelming majority of the more than 200 law enforcement agencies 
that provided documents engaged in at least some cell phone tracking. Most law 
enforcement agencies explained that they track cell phones to investigate crimes. Some 
said they tracked cell phones only in emergencies, for example to locate a missing 
person. Only ten said they have never tracked cell phones. 

Many law enforcement agencies track cell phones quite frequently. For example, 
based on invoices from cell phone companies, it appears that Raleigh, N.C. tracks 
hundreds of cell phones a year. The practice is so common that cell phone companies 
have manuals for police explaining what data the companies store, how much they charge 
police to access that data, and what officers need to do to get it. 

Most law enforcement agencies do not obtain warrants to track cell phones, and 
the legal standards used vai'y widely. For example, police in Lincoln, Neb obtain GPS 
location data on telephones without demonstrating probable cause. Police in Wilson 
County, N.C. obtain historical cell tracking data where it is “relevant and material” to an 
ongoing investigation, a standard lower than probable cause. Yet some police 
departments do protect privacy by obtaining warrants based upon probable cause when 
tracking cell phones. For example, police in the County of Hawaii. Wichita, and 
Lexington. Ky. demonstrate probable cause and obtain a warrant when tracking cell 
phones. If these police departments can protect both public safety and privacy by meeting 
the waiTant and probable cause requirements, then surely other agencies can as well. 

Moreover, it is not just state and local law enforcement agencies that obtain 
geolocation data under inconsistent standards. The U.S. Attorney’s Offices appear to do 
so as well. The Department of Justice maintains that the government need not obtain a 
warrant and show probable cause to track people’s location, with only one exception: 
real-time GPS and ttiangulation data. Since at least 2007, DOJ has recommended that 
U.S. Attorneys obtain a warrant based on probable cause prior to engaging in these forms 
of cell phone tracking.'"* 

However, not all U.S. Attorneys Offices obtain a warrant and show probable 
cause even in the limited circumstances in which DOJ recommends that they do so. 
Litigation by the ACLU and Electronic Frontier Foundation under the Freedom of 
hifoiination Act revealed that U.S. Attorney’s Offices in the District of New Jersey and 
the Southern District of Florida have obtained even the most precise cell tracking 


http://ww'w. aclu.org/protecting-civil-liberties-digitai-age/ce.Il-phone-locatioii-trackine- 
pubUc-records-request . Supporting documentation demonstrating the factual assertions 
throughout this section can be found at this webpage. 

*"* Senate Judiciary 2011 ECPA Hearing, at 7 (testimony of James A. Baker, 

Assoc. Deputy Attorney Gen., U.S. Dep’t of Justice), available at 
http://l .usa.gov/lsojNy. 
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information without obtaining a warrant and showing probable cause.''' Because the 
FOIA focused on only a small number of U.S. Attorney’s Offices, it may well be that 
many other offices also do not follow DOJ’s recommendation. 

The records the ACLU has obtained from local, state, and federal law enforcement 
agencies conclusively demonstrate that warrantless geolocation tracking is not a merely a 
theoretical privacy risk. Americans’ privacy rights are violated by warrantless cell phone 
tracking routinely. 

Congress is in a good position to put an end to these violations. In his concurrence 
in Jorus, Justice Alito wrote: “In circumstances involving dramatic technological change, 
the best solution to privacy concerns may be legislative.’’"’ Moreover, when considering 
how to apply the Stored Communications Act to government requests to obtain historical 
cell site location information, the Third Circuit has stated that, “we are stymied by the 
failure of Congress to make its intention clear.”^’ 

Congress should act not just to protect privacy but also to safeguard law 
enforcement investigations. Given the changes in Fourth Amendment jurisprudence, law 
enforcement faces a very uncertain standard for proceeding with searches, operating in 
emergencies and securing information from telecommunications providers. 

Point VI. The GPS Act Would Safeguard Americans’ Privacy While Allowing Law- 
Enforcement to Do its Job. 

The ACLU supports passage of the GPS Act because it would ensure that law 
enforcement agents obtain a warrant for geolocation information, subject to certain 
reasonable exceptions. 

The heart of Act is the requirement that "[a] governmental entity may intercept 
geolocation information or require the disclosure by a provider of a covered service of 
geolocation information only pursuant to a warrant issued using the procedures described 
in the Federal Rules of Criminal Procedure ....”§ 2602(h)((2). 

In turn. Federal Rule of Criminal Procedure 41 provides that “a warrant may be 
issued for any of the following: (1) evidence of a crime; (2) contraband, fruits of crime, 
or other items illegally possessed; (3) property designed for use, intended for use, or used 
in committing a crime; or (4) a person to be arrested or a person who is unlawfully 
restrained.” 


ACLU, ACLU V. Deparlmenl of Juslice: ACLU Lawsuit To Uncover Records of Cell 
Phone Tracking. Sept. 6, 2011, http://www.aclu.org/free-speecli/aclu-v-department- 
justice 

'®132S. Ct. at964. 

In the Matter of the Application of the United States of American for an Order 
Direciing a Provider of Electronic Communication Serice to Disclose Records to the 
Government. 620 F.3d 304, 319 (3d Cir. 2010). 
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Thus, through its incorporation of the Rule 41 standard, the GPS Act strikes a 
reasonable — and constitutionally necessary — balance between privacy and law 
enforcement interests. Under this provision, for example, when law enforcement agents 
have a good reason to believe that tracking the location of a cell phone will turn up 
evidence of a crime, or that a cell phone was used during the commission of a crime, law 
enforcement agents will have little difficulty persuading magistrate judges to grant them 
permission to engage in location tracking. 

Further, the GPS Act contains a limited number of exceptions, for: 

• Emergency access when “it is reasonable to believe that the life or safety of the 

person is threatened”; 

• Foreign intelligence surveillance covered by the Foreign Intelligence Surveillance 

Act of 1978; 

• Law enforcement emergencies where there is not time to secure a warrant; 

• To retrieve lost or stolen phones; 

• To allow parents or guardians to monitor children; and 

• When the user has consented. 

The GPS Act could be strengthened through the inclusion of reporting 
requirements regarding law enforcement agencies’ collection of geolocation information. 
To be sure, law enforcement agencies may have a legitimate interest in keeping the 
details of specific investigations secret, but when it comes to aggregate statistical 
infonnation about the use of specific surveillance techniques, the public interest is best 
served through disclosure. 

Covert surveillance techniques are by their nature .secret, which has important 
ramifications for the ability of both Congress and the public to engage in oversight. 
Robust reporting requirements play a valuable role in filling what would otherwise be a 
void of information regarding the activities of government. For example, each year the 
administrative office of the courts produces aggregate reports on the use of wiretap 
authorities by law enforcement agencies. Without revealing any sensitive investigative 
details, these reports give Congress and the public meaningful insight into the frequency 
with which the government uses this surveillance technique and the kinds of crimes tliat 
they are used to investigate. 

Congress simply cannot perform effective oversight without data. For this reason, 
we urge the co-sponsors of the legislation to implement reporting requirements. 

Conclusion 

The ACLU agrees with Justice Alito that, in this time of rapid technological 
change, it is especially appropriate for Congress to step in and regulate the use of 
surveillance technology by government. The warrant and probable cause requirements 
strike the appropriate balance, ensuring that legitimate investigations can go forward 
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without eroding the privacy rights of hmocent Americans. We urge the committee to 
support H.R. 2168 and report it favorably from the committee. 
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Mr. Sensenbrenner. Thank you very much, and I want to thank 
all of the witnesses for making their statements within the time 
limit, that is not what usually happens around here. The Chair will 
defer asking questions and will begin by recognizing the author of 
this bill, the gentleman from Utah, Mr. Chaffetz. 

Mr. Chaffetz. I thank you Mr. Chairman. And thank you to all 
the witnesses, I appreciate your perspective and the passion you 
bring behind those perspectives. I find it fascinating that there are 
now more wireless accounts in this country than there are people 
in this country. To say that the technology is not pervasive would 
be inaccurate, it is very pervasive and can be helpful in many 
ways, but it can also be confusing as we try to find and test the 
limits of where privacy starts, where it ends, and what law enforce- 
ment can do about this. 

I also want to note, this bill is not intended to be solely focused 
on just law enforcement. What I am also worried about is some- 
body tracking and following somebody else in a surreptitious man- 
ner. The idea that somebody could take a spurned lover and put 
a GPS device or figure out how to track that person surreptitiously 
needs clarification of law. So this bill is not just about law enforce- 
ment, that has been the discussion thus far, but it is also about 
how do we as individuals track and follow other individuals with- 
out our own permission, and I want to make that clear. 

I also want to highlight a comment, actually, from Jason 
Weinstein, a Department of Justice deputy assistant Attorney Gen- 
eral who was called on Congress to clarify a law in this area, 
“There really is no fairness when the law applies differently to dif- 
ferent people depending on which courtroom you are standing in.” 

In addition, the top FBI lawyer, Andrew Weissmann, has stated, 
“FBI agents in the field need clear rules.” And it is telling agents 
who are in doubt, “Obtain a warrant to protect your investigation.” 
I know through the work of the ACLU that the police in Lincoln, 
Nebraska obtained GPS location data on telephones without dem- 
onstrating probable cause, but in close proximity in Wichita, Kan- 
sas, they do demonstrate probable cause in order to obtain this in- 
formation. And my understanding is since at least since 2007, the 
Department of Justice has recommended that U.S. attorneys obtain 
a warrant based on probable cause prior to engaging in these forms 
of cell phone tracking. 

I guess my initial question here, and I also highlight a quote I 
used earlier from Justice Alito who was quoted as saying a legisla- 
tive body is well-situated to gauge changing of public attitudes, to 
draw detailed lines and to balance privacy and public safety in a 
comprehensive way. I don’t believe we can just leave this to the 
court and hope that 5 years from now, something percolates up to 
the top of the food chain. 

I think that Congress has a proactive responsibility, and I am 
pleasantly surprised by the support we have from industry, they 
don’t want people to be afraid of their mobile phones and they don’t 
want people to be afraid of their automobiles and whatnot. 

My question, first, to Mr. Ramsey here, you would have to agree, 
don’t you, that there is great inconsistency and confusion, not only 
in light of just the Jones case, but from law enforcement agencies. 
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from prosecutors, where are the lines? Doesn’t this need clarifica- 
tion one way or the other? 

Mr. Ramsey. FLEOA would agree that there does need to he clar- 
ification, hut we feel that the way it is written is overly broad and 
we need to narrow that focus down to where it doesn’t hinder law 
enforcement. As you said, this bill isn’t targeting law enforcement; 
however, there are parts of it that might, for example, prevent ap- 
prehension of suspects. 

Mr. Chaffetz. Understood, and I appreciate it. The point I guess 
I am trying to make, the need for legislation to move on this. Mr. 
Cassilly, would you agree with that? You actually, in your testi- 
mony, argued that the court should deal with this and that Con- 
gress shouldn’t do. 

Mr. Cassilly. No, I didn’t say that. What I said was that you 
can’t show any evidence from court cases out there that seems to 
indicate a pervasive abuse by law enforcement of this ability. I 
think there are a couple of concerns. First of all, I think probable 
cause is a high standard, okay? My real case 

Mr. Chaffetz. My time is so short, I am already on to the yellow 
light here. There is a need to be consistent, you would agree with 
that? And would you also agree that there is great inconsistency? 
Even between Lincoln, Nebraska and Wichita, Kansas, between dif- 
ferent courts and between what the FBI is saying, and what the 
Department of Justice is saying, there is great uncertainty and 
there is not a point of clarification thus far, correct? 

Mr. Cassilly. I agree that we need to come up with some gen- 
eral uniform rules, just in order to help the industry be able to re- 
spond and know whether 

Mr. Chaffetz. But you don’t think law enforcement and the 
prosecutors and the courts needs some clarification as well? This 
is a 9-to-nothing case in the Jones case. 

Mr. Cassilly. I think we do, but I don’t think we need to go as 
far as this bill goes. I think this bill would seriously prevent us 
from lawfully acquiring 

Mr. Chaffetz. So you may disagree with the standard, but you 
would agree that there is a need for a standard, correct? 

Mr. Cassilly. Yes. 

Mr. Chaffetz. With that, I yield back, Mr. Chairman. 

Mr. Sensenbrenner. The witness should answer the question. 
Do you agree there should be a standard? 

Mr. Cassilly. I think there should be a standard. I don’t think 
that the probable cause standard as set out in this bill is appro- 
priate. There was a hypothetical, the actual case I gave you regard- 
ing the gang shooting, and the information we got in the gang 
shooting, that doesn’t rise to probable cause standard. That is an 
anonymous informant, which everybody who deals with probable 
cause will know that that is not enough to allow us to proceed to 
get a warrant with an anonymous, untested informant. But it 
would be enough to allow us to establish a reasonable basis under 
other court decisions to request that sort of information. 

Mr. Sensenbrenner. Thank you. The gentleman from Virginia, 
Mr. Scott. 

Mr. Scott. Thank you, Mr. Chairman. Mr. Black, if the police 
had five unsolved rapes using what essentially looks like the same 
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MO, and wanted cell phone information to ascertain if one cell 
phone had been at each of the sites at the appropriate time, would 
that he something that would be — should be allowed? And follow 
up on that, if there is a robbery on Times Square on New Year’s 
Eve, would getting the cell phone information from everyone on 
Times Square that night also be available, or is there a difference? 

Mr. Black. Maybe I will start with the second provision, I think 
that identifies the fact that when we are asking for information, lo- 
cation information, we are not asking a question of who is not 
there, we are asking a question where are people. So you are find- 
ing out a lot of information which, in some cases, is considered very 
private by the person who is being the subject of inquiry. And we 
do feel that a probable cause standard is not that high a standard, 
but it is an important — it a standard higher enough to protect some 
vital privacy rights. 

In any specific example we can come up with, we would like the 
exceptions, scrutinized and I think worked with. 

Mr. Scott. In the case of five different sites, five different times, 
is that targeted enough to satisfy probable cause? 

Mr. Black. If there is a robbery in Time Square in a certain time 
frame, and you want to find everyone who was in Times Square at 
that point, I guess I would probably have some problem with that. 

Mr. Scott. What about the five different rapes, five different 
times where it is unlikely that any more than one person would 
satisfy that search? 

Mr. Black. I think there are adequate tools. I do not think that 
the information of that — that sounds pretty persuasive to me. We 
have legal precedents and maybe some other who has spent some 
time in criminal law. I think there will always be borderline cases. 
By and large, I really think the vast majority of law enforcement 
needs are not super time sensitive and can be met by a probable 
cause standard. What you are suggesting is a state of facts that 
make it pretty logical to want to get that information. To me, that 
gets close to probable cause. 

Mr. Scott. Okay. Ms. Crump, should it make a difference wheth- 
er or not the device is attached or the search is done without a 
physical attachment, say, to a car? Should that make a difference? 

Ms. Crump. Thank you for the question. No, I don’t believe that 
should make a difference. I think the Supreme Court decision. Jus- 
tice Alito stated it well when he pinpointed the intrusion that oc- 
curs through tracking is the monitoring of someone’s movements, 
particularly over an extended period of time. You can accomplish 
that by attaching a GPS device to someone’s car, but you can ob- 
tain the same type of intimate private information by tracking 
someone through their cell phone. And because the relevant factor 
is a degree of privacy invasion, the physical attachment of the de- 
vice is not the operative thing here. 

Mr. Scott. Now people have used the term “warrant with prob- 
able cause.” Is there such a thing as a “warrant without probable 
cause”? 

Ms. Crump. Not generally, no. 

Mr. Scott. Okay. Should — if you have a warrant, should the per- 
son being surveilled be notified the same way they are notified in 
any other warrant? 
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Ms. Crump. I think it depends on the context. In general, there 
are exception for notification when warrants are served. So for ex- 
ample, if it would interfere with an ongoing law enforcement inves- 
tigation. I think that one could certainly make an argument that 
if you were tracking someone for the purposes of a criminal inves- 
tigation and notifying them of the tracking would interfere with 
that investigation, that there is a strong argument to be made that 
as in, for example. Historic Communications Act, there would be a 
good reason to have a provision that upon a good cause showing 
you would be exempt of that requirement. I think you can accom- 
modate the privacy interest here while also making reasonable ac- 
commodations such as that for compelling law enforcement inter- 
ests. 

Mr. Scott. Does the bill have an exemption for searches done 
under FISA? 

Ms. Crump. Yes, the bill has that exemption which would allow 
for important national security investigations to go forward. That 
is one a number of reasonable and limited exemptions including for 
consent, for monitoring minor children when their parents wish it 
to be done, and for various emergency circumstances, such as, for 
example, when someone is in danger of their life or serious bodily 
harm. 

Mr. Sensenbrenner. The other gentleman from Virginia, Mr. 
Goodlatte. 

Mr. Goodlatte. Thank you, Mr. Chairman. I very much appre- 
ciate your holding this hearing on legislation and this important 
evolving technology. And I want to thank and commend the gen- 
tleman from Utah, Mr. Chaffetz, for introducing the legislation 
which I am pleased to cosponsor. 

I would like to start by asking all for of you, and I will start with 
the representatives of law enforcement first. In examining practices 
of State and local law enforcement, what has the experience been 
in those jurisdictions which require a probable cause warrant 
standard for the attachment of these devices? 

Mr. Ramsey. I would probably have to defer to Mr. Cassilly here 
on the State and local law enforcement aspect of that nature. 

Mr. Cassilly. I am sorry. Congressman, I can’t answer that be- 
cause I am not aware of — other than until I heard about Wichita, 
I am not aware of a jurisdiction that did — does require probable 
cause for access. Most of the jurisdictions that I am aware of use 
a reasonable basis standard. 

Mr. Goodlatte. Mr. Black or Ms. Crump. 

Mr. Black. Well, we don’t collect that information on law en- 
forcement, but I can tell you that a warrant clearly provides a clear 
message that a private sector company can feel much more con- 
fident responding to without running the risk of violating their cus- 
tomers’ rights. It is a clear legal standard that response to that 
warrant has been established. I think it provides a level of protec- 
tion to the private sector as well as for the customer and citizen. 

Mr. Goodlatte. Ms. Crump, maybe you know of some jurisdic- 
tions that impose that standard? 

Ms. Crump. Thank you for the question. When we conducted our 
35 — our 32-State survey, we uncovered a small number of jurisdic- 
tions that do require a warrant based on probable cause to track 
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even cell phones. So, for example, the County of Hawaii, Wichita 
and Lexington, Kentucky all reported to us that they require a 
warrant based on probable cause. I do not believe that those juris- 
dictions would willfully put their citizens in danger in order to im- 
pose this requirement. I think it is a more reasonable conclusion 
to believe that they can accommodate legitimate law enforcement 
interests while also accommodating the warrant requirement, and 
that is a reason the requirement set out in the GPS Act are reason- 
able ones. 

Mr. Goodlatte. Although the court concluded that the govern- 
ment’s action in Jones was a search, none expressly required that 
police get a warrant in future GPS tracking cases. The government 
effectively forfeited that argument. Further, there is no clear indi- 
cation of the level of suspicion, probable cause, reasonable sus- 
picion or something less that is required to attach a GPS unit and 
monitor the target’s movement. 

So let me ask you each of you what level of suspicion, probable 
cause, reasonable suspicion or something less should be required to 
attach a GPS unit and monitor a target’s movements or monitor a 
target via a cell phone. We will start with you, Mr. Ramsey. 

Mr. Ramsey. The way I understand the question is you are ask- 
ing for at what level? 

Mr. Goodlatte. Finish the work the court, they punt it over to 
us and help us find the best way to set a standard that protects 
the privacy rights of individuals and particular innocent citizens. 
Our bill, as you know, requires probable cause as a standard, but 
if you are troubled by that, make a case for another standard. 

Mr. Ramsey. A lot of times these geolocational devices are used 
as building evidence, it is the building blocks in some of these in- 
vestigations, working up to a probable cause warrant for an arrest 
of an individual. So if you start at the building block level, you are 
actually near the reasonable suspicion level. 

Mr. Goodlatte. I am running out of time so I am going to jump 
over to Ms. Crump, too, and if we have time, we will come back 
to Mr. Cassilly. 

Ms. Crump. In our view the reasonable suspicion requirement is 
too low. The warrant requirement — the probable cause requirement 
is the basic default of under our constitutional system when there 
is a search. Law enforcement often mentions that it would be use- 
ful to track GPS and develop probable cause. However, there are 
a wide range of useful law enforcement techniques that law en- 
forcement is not allowed to conduct without probable cause because 
they are simply too invasive. It would surely be useful for law en- 
forcement agents to be able to search someone’s phone without hav- 
ing to get a warrant. But we don’t allow that under our system be- 
cause we recognize that that is a grave intrusion. 

When you telk about the type of information that is available 
through GPS tracking, for instance, being able to tell where some- 
one gets medical treatment or whether they are an unfaithful hus- 
band, or who their friends and associates are. That is similarly sen- 
sitive and should be similarly protected. 

Mr. Goodlatte. Thank you, Mr. Chairman. 

Mr. Sensenbrenner. The gentleman’s time has expired. The 
gentleman from Colorado, Mr. Polls. 
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Mr. POLIS. Thank you for holding this hearing, Mr. Chairman. I 
was considering joining as cosponsor of this bill, and based on what 
I am hearing today, I plan on doing so after this hearing. It has 
been very informative and appreciate it. 

One question I had, and am not sure who can help me on the 
panel is how the process works with regard to identity list sus- 
pects, or John Does or people that, of course, and I would think if 
somebody is a serious criminal, they would have no identity at- 
tached to their cell phone, it would simply be an anonymous cell 
phone. Is there a procedure under law enforcement, and perhaps 
Mr. Cassilly or Mr. Ramsey would know that allows for a warrant 
for a John Doe in terms of following them on GPS or tracking their 
cell phone. 

Mr. Cassilly. Often we do get phone numbers. For example, if 
a victim called and lured to a specific location and the victim has 
the suspect’s phone number on their phone, we would do a petition 
check. We use court order, so we would do a petition for a court 
order, and cite the cell phone, the number, information on that spe- 
cific number. 

Mr. PoLis. This bill would not impact that process; is that cor- 
rect? 

Mr. Cassilly. It would if it requires a probable cause warrant. 

Mr. PoLis. Well, it would insofar as it does it the same way if 
you have their identity, but it doesn’t do it separately. There would 
still be a way of doing it based on the cell phone number with prob- 
able cause. 

I tend to agree with what Ms. Crump said, if you are talking 
about somebody’s home, somebody’s private conversations and 
where they are, these are very intimate matters and deserve all of 
our privacy protections. And obviously, we are focusing a lot on the 
violation of privacy for criminal investigation side, but I want to 
open this up a little bit about some of the positive applications 
from a consumer perspective with regard to GPS, and some of the 
potential lifesaving technologies. And I want to ask Mr. Black 
whether he thinks this bill will in any way stand in the way of life- 
saving services or ambulances or other fire-reduction services that 
are going after people who are on cell phones and have GPS. Does 
this interfere with some of the positive side of this at all? 

Mr. Black. Thank you for the question. I think, to the extent 
that lifesaving situations involve maybe law enforcement as well, 
clearly the exceptions, I think, are sufficient to cover those cir- 
cumstances. I would suggest that people value their privacy enough 
that there will be times if, in fact, easy access to their location in- 
formation transpires, turning off your phone becomes a customer 
consumer reaction which we don’t want. We don’t want people feel- 
ing they don’t want to be followed so they are going to start turn- 
ing off their phones, and then get in an accident or critical situa- 
tion and that is not available. 

So I think given a degree of security and trust that you will not 
be casually surveilled is actually helpful in making sure people use 
all the benefits of their cell phone, including their location identity 
information. 

Mr. PoLis. So people would be more likely to keep their cell 
phones during potential emergency situations if they have privacy 
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assurances there as well. And I assume many of the privacy spe- 
cifics can he dealt with in user agreements with cell phone pro- 
viders as well. Many people may choose to, in fact, allow for emer- 
gency purposes, their provider to know where they are, they might 
have some kind of biometric feedback if they need their heart rate 
monitored and ascribe to privacy to that. And again, I would think, 
in general, people are more likely to do these kinds of lifesaving ac- 
tivities if they are assured that this information will not be used 
for ulterior reasons or by “the government” or by anybody else. It 
would just be a private arrangement with their medical care pro- 
vider. 

And again, there is tremendous promise of the biometric feed- 
back of saving lives, whether it is simply monitoring insulin level 
or it is heart rate or a number of other conditions. And to the ex- 
tent we can increase confidence in these by reassuring privacy, I 
think we can save lives through this law. So I plan on joining as 
a cosponsor and I thank the Chair for the hearing and I thank the 
witnesses for coming forward. 

Mr. Sensenbrenner. The gentleman’s time has expired. The 
gentleman from South Carolina, Mr. Gowdy. 

Mr. Gowdy. Thank you, Mr. Chairman. Ms. Crump, it has been 
a while since I studied Constitutional law or search and seizure. 
What is the standard required for physical surveillance if law en- 
forcement just wants to follow someone? 

Ms. Crump. The Supreme Court has set different standards for 
physical surveillance and electronic surveillance. Physical surveil- 
lance, the Supreme Court has not required a warrant based on 
probable cause to carry it out. 

Mr. Gowdy. That is what I thought. So you can follow someone 
in their car without meeting any standard of proof? 

Ms. Crump. That is right, and I think 

Mr. Gowdy. What about air space surveillance? 

Ms. Crump. I think that is a similar rule. The line that Justice 
Alito 

Mr. Gowdy. I am not going there yet, we are not there yet. I am 
just asking you about physical surveillance, both on land and air. 
And there is no probable cause requirement for either. 

Ms. Crump. That is certainly correct. 

Mr. Gowdy. What about grand jury subpoenas, what is the 
standard required to issue a grand jury subpoena? 

Ms. Crump. Generally it would be relevance. 

Mr. Gowdy. Right. So could a Federal prosecutor send a grand 
jury subpoena to a service provider and get their passive GPS his- 
torical GPS information? 

Ms. Crump. I don’t believe so. 

Mr. Gowdy. Why not? 

Ms. Crump. Because of the current restrictions of the Historic 
Communications Act which already sets a standard for tracking lo- 
cation. 

Mr. Gowdy. So what would a prosecutor have to do to get that? 

Ms. Crump. To obtain cell site location information under the 
Historic Communications Act. Right now, prosecutors have to show 
that the information is relevant and material to an ongoing inves- 
tigation. 
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Mr. Gowdy. That is my point it is not probable cause, it is a rel- 
evance standard, so that is what I asked. Right? 

Ms. Crump. I misunderstood then. 

Mr. Gowdy. No, more likely, I misphrased my question. What 
about folks on probation, what is the standard, if any, for GPS 
monitoring of folks on probation? 

Ms. Crump. Probationers have generally been recognized have 
fewer Fourth Amendment rights. 

Mr. Gowdy. Right, because they have already been convicted. 
How about folks who are on bond and are still presumed innocent, 
what is the requirement for GPS tracking of folks on bond? 

Ms. Crump. It is similar. 

Mr. Gowdy. Similar in that it is not probable cause? 

Ms. Crump. That is right. 

Mr. Gowdy. All right. Orders of protection for women who have 
been battered and go to a court, and one of the conditions of the 
order of protection is GPS monitoring. What is the standard there? 

Ms. Crump. You have reached one actually that I am not particu- 
larly familiar with that area of law, so I am afraid I cannot answer. 

Mr. Gowdy. It is not probable cause. 

Mr. District Attorney, Jason Chaffetz and Chairman Goodlatte 
are two of the most reasonable people in Congress. Period, new 
paragraph. 

Mr. Sensenbrenner. Without objection, so ordered. 

Mr. Gowdy. My 

Mr. Cassilly. Mr. Goodlatte left, he didn’t hear that. 

Mr. Gowdy. Well, I am sure the transcript will reflect that I 
meant that with a lot of earnestness, because I did. I am biased 
toward law enforcement and prosecutors. So how can you get to- 
gether with Mr. Goodlatte and Mr. Chaffetz and come up with 
something that meets their legitimate privacy in Constitutional pri- 
vacy expectations and still doesn’t hamper law enforcement’s abil- 
ity to investigate cases for which probable cause has not been de- 
veloped yet? 

Mr. Cassilly. I would be very glad to do that. I still assert that 
a reasonable basis standard which is used, recognized by the 
United States Supreme Court and used throughout law enforce- 
ment for many, many decisions would be a proper protection. 

As far as protecting the industry from knowing whether or not 
the request is legitimate or not, using a court order without requir- 
ing that the court order be a warrant. Once you change the word 
“court order” to “warrant,” you complicate the situation because 
warrants require a lot of service and notice, as opposed to a court 
order, which is used for things like wiretaps and other types of 
electronic surveillance. 

Mr. Gowdy. But you are happy to sit down on behalf of District 
Attorneys and work with Mr. Chaffetz and Mr. Goodlatte? 

Mr. Cassilly. I would be happy to do that. 

Mr. Gowdy. Thank you, Mr. Chairman. 

Mr. Sensenbrenner. Gentleman’s time expired. The gentle- 
woman from California, Ms. Chu. 

Ms. Chu. Thank you, Mr. Chair. Mr. Black, in your testimony 
you provided some very interesting statistics in regard to 
smartphone users; you said that only 6 percent of Americans use 
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geolocation or apps, and that 70 percent of users are completely un- 
aware that they exist. So I would like to ask you and Ms. Crump, 
some out there might argue that cell phone users voluntarily make 
their locations known because they carry a cell phone by choice. 
How would you respond to that statement? 

Mr. Black. I think certainly making it available to a particular 
user, or for a particular purpose, is not making it available to the 
world for all purposes and not making it available to all other third 
parties. So yet, people may, in fact, say I am willing to have this 
in order to have an entity communicate with me, but that does not 
mean I want to be followed everywhere and my location known by 
a variety of people who I do not choose to have given access to. 

Ms. Chu. Ms. Crump. 

Ms. Crump. I agree with everything Mr. Black just said. Today 
it is difficult to function in our society without having a cell phone. 
I think it is a mistake to equate a decision to carry a cell phone 
with a decision that you do not mind being tracked 24 hours a day, 
7 days a week. I think that in our society, there is a lot of informa- 
tion we might, for example, choose to release to someone for a lim- 
ited time, or for a limited purpose, but that does not mean we 
would want everyone to have access to the same information, or 
that we would feel comfortable being tracked by law enforcement. 
So I think there is a meaningful distinction between disclosing lo- 
cation information to a cell phone company and disclosing it to ev- 
eryone. 

Ms. Chu. Thank you. 

And, Mr. Black, you also said that companies should treat 
geolocation information with the highest respect when it is gath- 
ered from users. How far could potential abuse go in terms of the 
private information obtained? 

And Ms. Crump, too. 

Ms. Crump. I am sorry, the question was how far could 

Ms. Chu. How far — to what extent could private information be 
obtained? How far could it go? 

Ms. Crump. It could actually go quite far. We have much per- 
sonal and sensitive information in the hands of third parties today 
simply by the way that our devices function. It is not simply that 
we store all of our location information with our cell phone compa- 
nies; we store all of our emails with third-party companies such as 
Google. 

And so if we don’t establish firm guidelines to indicate that our 
private information is still private, even in our increasingly digital 
and interconnected age, Americans will end up forfeiting rights 
that we have held dear for a long time. 

Mr. Black. I would agree. The fact is, modern digital technology 
has great benefits, but it does open up the potential for great ac- 
cess into people’s private affairs.And that is what we are trying to 
do. We are trying to — the level of intrusion, unwarranted and 
unconsented intrusion into people’s private affairs — their location, 
their sensitive data, a variety — is something that we need to guard 
against. 

I love my industry, I love our technology, and it does great 
things, but there is a potential dark side. And what we are trying 
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to do is make sure that we have sufficient safeguards to make sure 
that the very fundamental, vital privacy protections are preserved. 

Ms. Chu. Well, in fact, you write that, by having location privacy 
access, that you could show not just where people work and sleep 
but also religious preferences, doctor visits, political affiliations. 

Mr. Black. Exactly. I mean, the amount — what you learn by 
being able to monitor precisely someone’s location over a period of 
time can reveal all kinds of sensitive things. It is not just illegal 
behavior; it is all kinds of personal, private information — health 
care. 

I mean, not everyone can do it everyplace, but technology clearly 
exists. And I think Matt Blaze’s testimony says, not only can you 
identify where they are in a building but what floor in a building, 
so what doctor offices, what specialty they are in. 

I mean, you are talking about a surveillance, monitoring capa- 
bility which can be very detailed, very intrusive. And the longer 
you can do it, the more complete you do it, the more you can find 
out the most intimate facts about an individual. 

Ms. Chu. And is it possible that smartphone users might be hesi- 
tant to use their device because they fear that the government will 
invade their privacy? 

Mr. Black. I am sorry, I didn’t hear the whole question. 

Ms. Chu. Well, you refer in your testimony to smartphone users 
not wanting to use their devices because of privacy invasions. 

Mr. Black. I am sorry, my hearing. 

Mr. Sensenbrenner. The witness will answer 

Ms. Chu. Well, thank you. 

Mr. Sensenbrenner [continuing]. The question. 

Ms. Chu. I yield back. 

Mr. Sensenbrenner. Okay, she yields back. 

The gentleman from California, Mr. Lungren. 

Mr. Lungren. Thank you very much, Mr. Chairman. 

I am sorry I wasn’t here for your formal presentations, but I will 
continue to look at this. 

Here is the dilemma I find. We have several generations of 
Americans who utilize devices today to tell everybody in the world 
who they are and what they are and, you know, Facebook and so 
forth, where they are revealing so much about themselves and, at 
the same time, they somehow have an expectation of privacy, even 
though they have given information to the very intimate thing 
called the Facebook. And sometimes it is difficult in conversation 
with folks to say, well, you have exposed all of this to the world, 
and now you have this expectation of privacy. And so we have al- 
most different perspectives now on what the reasonable expectation 
of privacy is. 

As an elected official, I find my privacy invaded by something 
called trackers today. I mean, you walk out of a building here, and 
someone is in your face with a smartphone asking you a question 
equivalent to, “When are you going to stop beating your wife?”, and 
if you don’t answer it, it looks like you are running away from it. 
One of the great techniques people have figured out on that is to 
pull out their own cell phone and to start talking with their spouse. 

And so, as Mr. Gowdy was saying, what is required for law en- 
forcement to have somebody follow somebody? And is there an es- 
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sential difference between, you know, a human tracking and elec- 
tronic tracking from a law enforcement standpoint, and how would 
you articulate that? And I would ask that to you, Ms. Crump. 

Because I am struggling with this. I am trying to figure out what 
would be reasonable. Having been on the law enforcement side, I 
understand the necessity of gathering information. And the general 
rule is, if it is somehow publicly available, you don’t have that ex- 
pectation of privacy. 

And so, how should we analyze this in terms of the — if I, in law 
enforcement, have an unlimited number of police officers, men and 
women, I could pretty well follow you. I can’t go into the house, but 
I could wait outside wherever you go. I could know your location 
by making sure I have enough cops on the street. I don’t think I 
have to go to a court to do that. 

What is the essential difference, from an analytical standpoint, 
between having an unlimited number of cops available to do that 
and being able to track you by the device that you might have? And 
once we establish what that analytical difference is, what standard 
should be used, if any, to limit what law enforcement might do? 
Can you help me with that? 

Ms. Crump. I think that is one of the most interesting and com- 
plicated questions in this area. And you are getting at the dif- 
ference between physically following someone on the one hand and 
tracking them electronically on the other. 

In a word, the difference is resources. Physically tracking some- 
one requires a significant expenditure of resources on behalf of law 
enforcement, and that imposes a natural limit on the degree to 
which this intrusive form of surveillance can be carried out. 

What has happened with the development of electronic tracking 
is, that natural limit has fallen away. So today is it possible for a 
law enforcement agency to track someone’s movement in the com- 
fort of the stationhouse simply by tracking the location of their cell 
phone. And I think 

Mr. Lungren. So what is the analytical application there? I 
mean, we don’t define privacy standards by budgets, I presume, or 
by the comfort or discomfort of the law enforcement officer. So 
what should we be looking at to help us to come up with legislation 
that is appropriate? 

Ms. Crump. Thank you. 

I think the relevant factor is the degree of privacy invasion. And 
I think what motivated the Supreme Court’s unanimous decision in 
Jones was the view by many of the Justices that tracking someone 
electronically for 24 hours a day, 7 days a week is simply a totally 
different animal than doing that the old-fashioned way by foot. 

And because the technology has changed, we need to recalibrate 
the relevant legal standards. And I think the GPS Act does that 
quite well. 

Mr. Sensenbrenner. The gentleman’s time is expired. 

The gentleman from Georgia, Mr. Johnson. 

Mr. Johnson. Yes, I was going to ask a similar question. My 
question would have been, if an automobile is situated in a public 
place and then law enforcement attaches a GPS device surrep- 
titiously, what is the difference between that kind of surveillance 
and also just a physical surveillance, you put a tail on someone and 
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follow them around for 28 days or so? You could certainly follow 
someone around in a car — one car or two cars could follow someone 
for 28 days, and there would be no issue as far as privacy is con- 
cerned. Is that correct? 

Ms. Crump? 

Ms. Crump. Yes, thank you. I think 

Mr. Johnson. You could even follow someone from the air in a 
helicopter, you know, or perhaps even a drone. If you are following 
someone with a drone that just hovers overhead and tracks their 
movements without a GPS on the automobile, you could do that le- 
gally, could you not? 

Ms. Crump. I think I would distinguish between the physical 
surveillance examples on the one hand and the drone and GPS 
tracking 

Mr. Johnson. Well, how about a helicopter? 

Ms. Crump. And I think the helicopter is more like physical sur- 
veillance. You know, I think the salient difference is the ease with 
which this surveillance can be carried out. When 

Mr. Johnson. If it is easier than physical surveillance — well, if 
it is easier than physical surveillance on the ground, versus in the 
air, what are the implications? 

Ms. Crump. I think to some degree an economic analogy is use- 
ful. People simply buy more of something that is cheaper. And 
when you reduce the cost of engaging in surveillance, the odds that 
someone will engage in surveillance where is it not necessary or 
doesn’t serve a strong law enforcement purpose increases. And, 
therefore, it is a greater threat to privacy, and a higher standard 
is warranted. 

Mr. Johnson. Well, Darrell Issa may come up with a device that 
interferes with the GPS signal from a car, and — I mean, the mar- 
ketplace has something to do with this also. 

Mr. Black? 

Mr. Black. Well, I want to, I think, reiterate what my industry 
has done — and I love it — it has made it so easy to access this tre- 
mendous amount of private information. The resources, if you will, 
the prioritization of resources has acted as a certain natural check 
and balance on the overuse of extensive surveillance. What tech- 
nology has done is made that cost de minimis, and will, frankly, 
make it even less so in the future. It gets smaller and smaller. So 
instead, not one person sitting in a police station watching one car; 
one person watching a thousand people that they now decided to 
follow. 

So the ease of doing it is why we are saying that we need to re- 
calibrate what the threshold is. 

Mr. Johnson. Uh-huh. So that is — this is a very difficult situa- 
tion that — I feel like yielding to Mr. Lungren. 

Mr. Lungren. Yeah, will the gentleman yield? 

One of the things that strikes me is, we see in a lot of cities now, 
they have a lot of cameras set up all over. And it has been con- 
troversial, but it is going on. Is there an essential difference be- 
tween the ubiquitousness of cameras and being able to track some- 
body that way and this kind of a device? And is that difference that 
somehow you are invading the person’s property interest — in other 
words, you are actually reaching out and touching them in order 
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to be able to follow them? Or you are receiving something from 
something which is actually touching them? Is that a — could I ask 
that question? 

Mr. Johnson. Sure. 

Ms. Crump. I think there are a few ways to distinguish the cam- 
era example from GPS tracking. The physical attachment is one of 
them. Some people recognize an indignity to having their own ob- 
ject be turned into a device which is essentially spying on them. 

But also, today, cameras, generally speaking, capture one person 
at one point in time. They are not engaging in a type of continuous 
tracking. That may not be true in the future when all of these cam- 
era networks are, you know, networked together and can be easily 
be analyzed. But for right now, I think, where the technology is, 
there is a meaningful distinction. 

Mr. Sensenbrenner. The gentleman’s time has expired. 

The gentleman from Pennsylvania, Mr. Marino. 

Mr. Marino. Thank you. Chairman. 

You raised the question, or you made the statement concerning 
the Supreme Court v. Jones, but you did not delineate their rea- 
soning, to a certain extent. And when the Supreme Court stated 
that affixing a GPS monitor to track a car for weeks is within the 
meaning of the Fourth Amendment, it didn’t address the search 
issue. 

So how would you interpret the search issue? Would you put — 
ma’am, would you put a 2-week limit on the search issue? Or is it 
a search issue? Could you please respond to that? 

Ms. Crump. Thank you for the question. 

Law enforcement agencies have actually objected to the idea of 
establishing different criteria based on the length of search. And 
they have done that because they argue that that would be unman- 
ageable, because how do you know how long, you know, a search 
is? If you track someone for a week and then wait another week 
and then track for a week, where does it categorize? 

So, for that reason, I think it makes the most sense to establish 
a uniform and clear standard that will be easy to follow, and that 
should be a warrant, probable cause standard for all location track- 
ing. 

But you are certainly correct in how you characterize the Jones 
decision. That case involved 28 days of geolocation tracking 

Mr. Marino. That is right. 

Ms. Crump [continuing]. And Justice Alito specifically said that 
we are not reaching the question of how long tracking has to occur 
for it to be a search, but surely 28 days crosses any reasonable line. 

Mr. Marino. So do you draw a distinction between any type of 
potential crime or any type of investigation compared to — let’s use 
a drug investigation. We want to monitor, but we don’t want to tip 
off the drug dealer that we are monitoring. And I say “we” because 
I was in law enforcement for 19 years. So it would tip that indi- 
vidual off, in most cases, that he or she was being followed. 

But let’s take it to the next level. Let’s take it to the level of a 
child being abducted, a child being taken by — we are not quite sure 
who the individual is per se, but we do have some reasonable infor- 
mation based on, say, a partial license plate, make and model of 
the vehicle, and to monitor that. Do you see a distinction there? 
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Ms. Crump. I think we all share the common intuition that some 
crimes are more serious than others, and a petty theft versus a 
child abduction should potentially be treated differently. 

I think the GPS Act, as currently drafted, responds to that by, 
for example, including an emergency situation. So if a child is ab- 
ducted and someone has a good-faith belief that the child is in dan- 
ger, law enforcement would be able to engage in tracking in that 
case, even without meeting the warrant requirement. Similarly, in 
the bill there is an exception for national security investigations. 

Mr. Marino. So who makes that determination? You are going 
to allow law enforcement to make that determination on a case-by- 
case basis? 

Ms. Crump. I think that this body is actually the appropriate one 
to make that determination. I think the current draft bill allows 
law enforcement appropriate flexibility, indicating the types of situ- 
ations in which law enforcement should be able to track even 
where they don’t meet the warrant requirement, while generally 
holding a warrant requirement in the vast majority of the inves- 
tigations where the police have time to go to a judge and prove 
their case to a neutral magistrate. 

Mr. Marino. Okay, thank you. 

I don’t know what my time is, but does anyone else on the panel 
have a comment pursuant to those statements or questions? 

Sir, please. 

Mr. Cassilly. Yes, I think one of the issues becomes the respon- 
siveness of the service provider. I mean, as the Congressman asked 
the question, who determines when you fall under the exception, I 
think the issue becomes, do the police run in to a disagreement 
with the service provider? Well, you know, we think their lives are 
at stake, and the service provider’s response is, well, you know, we 
don’t think so; you know, we are too busy right now. And I think 
one of the parts of this discussion should be, you know, what are 
the standards for the service providers to respond, the time limits 
that they have to respond. 

And I do agree that part of the good thing that comes out of this 
is that there is some sort of a standard instrument that comes out 
of this discussion — court order or a certain subpoena — with a basis 
that industry can rely on and say, okay, this is a reasonable re- 
quest, we are required to respond to this, and we do so in good 
faith. 

Mr. Marino. Good. Thank you. 

I think my time has long expired. Thank you. 

Mr. Chaffetz. [Presiding.] The gentleman yields back. 

We will now recognize the gentlewoman from Texas for 5 min- 
utes. 

Ms. Jackson Lee. I thank the Chairman very much. 

And this is a very vital discussion. I offered some legislation just 
a while back dealing with privacy issues as a Member of the Home- 
land Security Committee, an opportunity for Federal agencies to 
talk together, or either the Department of Homeland Security to 
talk with Justice and another department. And, certainly, the issue 
of privacy was raised, and the amendment was challenged on that 
basis, even though I thought that I had adequately put in privacy 
provisions. 
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And so I would like to pose my questions from a perspective of 
someone who has seen the challenge of privacy head-on and values 
my commitment to privacy and would make the argument that, in 
the instance of the particular amendment that had to do a lot with 
terrorism and issues of that sort, that it was misunderstood. 

But keeping that in mind, I vigorously believe that privacy is 
something that we should hold on to and deserves the ultimate 
standard of respect, while we recognize the challenges of law en- 
forcement or those who are engaged in counterterrorism. 

So I would like to ask Mr. Cassilly, just aside from all the discus- 
sions you have had with other Members and that you may have re- 
peated this or said this before, from the law enforcement perspec- 
tive — and I am going to ask you to wear a prosecutor’s hat and po- 
lice hat only because you are dealing with receiving information 
from law enforcement — what would be, in your mind, a sufficient 
privacy or structure of protection for getting information such as 
the data that says, “I was standing in a place today at a certain 
time,” that is, phone data, making a phone call, or I was moving 
around, going toward another place, which is the information I un- 
derstand that can be secured? What would be, in your mind, the 
privacy protection that law enforcement should adhere to or should 
consent to or should put in place? 

Mr. Cassilly. I think you are asking, just if I can clarify the 
question, what is the standard that we would use in being allowed 
to go forward to seek this information? 

Ms. Jackson Lee. Your clarification I think is a good interpreta- 
tion of what I thought, you know, was clear, which is, what would 
you believe were satisfactory privacy parameters as you pursue get- 
ting this information? 

Mr. Cassilly. Well, I think that the proper standard, which is 
of course what the Supreme Court has said, with respect to law en- 
forcement being able to go up and stop people on the street and to 
question them about crimes would be a reasonable basis. Do they 
have a reasonable basis, a reasonable suspicion, to make that in- 
quiry, to stop someone on the street, if we are using that analogy? 
To detain them on the street, to require them to produce identifica- 
tion on the street, that requires a reasonable basis standard. And 
I think that would be 

Ms. Jackson Lee. A reasonable basis of suspicion. 

Mr. Cassilly. Reasonable basis — reasonable suspicion of crimi- 
nal activity. And I think that is the same standard that would 
work under these circumstances, to require law enforcement to be 
able to show a reasonable basis. 

And they could show that either to the prosecutor in issuing a 
subpoena or through a petition to the court for a court order, as 
long as that was the requirement for the showing. 

Ms. Jackson Lee. With that in mind, let me — thank you, Mr. 
Cassilly. 

Let me go to Ms. Crump. And in a calm Judiciary Committee 
room, that sounds reasonable, but I would say to you, since I am 
not a fan of stop-and-frisk, which I understand has taken over in 
epidemic proportions in areas like New York, I would be concerned, 
having issued probable cause warrants as a member of the judici- 
ary, as a city court judge, and looking the officer face-to-face in 
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whatever disguise they were in, because I would get them 11:00, 
12:00, early morning hours, because they were just coming off the 
street and get the warrant based upon their presentation in the 
courthouse. 

Tell me your concerns about just that standard. Because what I 
see is potential, not purposeful havoc and not mean-spirited havoc, 
but I see havoc. And tell me what the basic corners of the concern 
would be. I just see tracking going on. 

Ms. Crump. Thank you for the question. 

I think one of the aspects of this debate that your comments 
highlighted was the importance of a judge being interposed be- 
tween a citizen and the police. We have a tradition in this country 
of interposing magistrate judges between the citizen and the police, 
and it is not because we don’t trust law enforcement agents, but 
it is because we believe, as the Supreme Court has said, that often 
there is a need for an objective mind to weigh the evidence at hand. 
And I think that it is important when location tracking is at issue 
for there to be that interposition between the citizen and police. 

Ms. Jackson Lee. Say that 

Mr. Chaffetz. Thank you 

Ms. Jackson Lee. Could I just have her repeat? Objective 
mind 

Ms. Crump. It is important to have an objective mind interposed 
between the citizens and the police. 

Mr. Chaffetz. Thank you 

Ms. Jackson Lee. Well, let me thank you very much. I yield 
back. 

Mr. Chairman, may I just inquire to you directly and just indi- 
cate that, as I am looking at the legislation, H.R. 2168, if I might 
inquire, you think the legislation has an objective mind interposed 
in between the decision? 

Mr. Chaffetz. Yes, I do. Yes, I do. 

Ms. Jackson Lee. All right. I thank the Chairman. I yield back. 

Mr. Chaffetz. Thank you. 

Now we will start a second round of questioning, and I will rec- 
ognize myself for 5 minutes. 

There are a number of exceptions that are put in here. Mr. 
Ramsey and Mr. Cassilly, is there anything that you would add or 
subtract to those list of exceptions as you have been able to look 
at the bill? 

Mr. Cassilly. Well, as I pointed out in my testimony, I think 
that the exception with respect to consent needs to be expanded to 
not only cover children’s phones but to cover phones of persons who 
may be mentally limited or who may be ill. 

We recently had a case in Maryland where an individual who 
was going into a diabetic episode was not able to respond to 911 
operators to tell them where he was. Under those circumstances, 
either it is an emergency situation, if it doesn’t fall under the life- 
threatening exception, there certainly should be some way of just 
asking a relative, “Okay, is it okay if we locate his phone?”, some- 
thing like that. 

But usually for someone who may be mentally limited, they are 
not going to — ^you know, they may function fine, they just may not 
be there. 
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Mr. Chaffetz. Okay. 

Mr. Cassilly. So we think that ought to be a thing. I think you 
have two emergency exceptions in the statute; I think they need to 
come together. And I think that the emergency needs to be a little 
broader than just, you know, serious injury and death. That is 
a 

Mr. Chaffetz. Let me do this in the essence of time. Perhaps if 
you could respond and give us any adaptations that you would like 
to see to the bill in general, but specifically to the exceptions. 

I would offer that to all of you, as well. 

Much of this is based on the wiretap statute. Is there anything 
that you don’t like about the wiretap statute that you would also — 
you would change in this bill but you would also change in the 
wiretap statute? 

Mr. Ramsey? 

Mr. Ramsey. We wouldn’t have an opinion on any changes to the 
Title III wiretap statute. 

Mr. Sensenbrenner. Mr. Cassilly? 

Mr. Cassilly. Well, I mean, I wouldn’t want to see any changes 
reflected on Title III. But when you look at Title III, Title III re- 
quires a probable cause finding. And when you end up saying that 
there you actually get the contents of the communication, whereas 
here you are only getting, you know, a location of a cell phone, that 
if you are looking at it from a perspective of the degree of intru- 
sion, that would say to me that then you would only require under 
these circumstances a reasonable, articulable suspicion. 

Mr. Chaffetz. Okay. 

Ms. Crump, Mr. Cassilly contends in his written statement that 
his organization believes, quote, “It is imperative to distinguish be- 
tween historical data compiled from cell tower hits and realtime 
GPS ping information.” Could you comment on that? 

Ms. Crump. Thank you for the question. 

I don’t think the distinction between historical and realtime data 
is a meaningful one. As one court has remarked, the story of your 
life doesn’t become any less sensitive because it has already been 
written. 

Today, cell phone companies store historical information about us 
for very lengthy periods of time. Some cell phone companies keep 
records of where we have been for over a year. And I think, in light 
of that, many Americans believe that where they have been for the 
past 60 or 90 days is at least as sensitive as where they are going 
in realtime. 

Mr. Chafeetz. Let me also ask you, Mr. Ramsey contends that 
there should be a lower standard of law enforcement to access 
geolocation information from smartphones and other mobile devices 
than the standard for attaching tracking devices to cars, because 
in the case of smartphones, quote, “the government doesn’t own nor 
are they attaching the locational device to the person,” as was obvi- 
ously the case in the Jones case. 

Can you comment on that? 

Ms. Crump. My instinct on this is the same as Justice Alito, that 
the relevant privacy invasion is the tracking of someone, not the 
property invasion. And, therefore, I think the distinction between 
physically attaching a GPS device to a car and obtaining equivalent 
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information from a cell phone company or an OnStar navigation 
system is not one that the law should reflect. 

Mr. Chaffetz. And, finally, in the essence of time here, again, 
we focused all on law enforcement; my intention with this legisla- 
tion was also to make this applicable to non-law-enforcement enti- 
ties. 

Is there anything in the bill that troubles you in terms of, is it 
civilians or average citizens out there tracking or following other 
individuals? Because right now they are not precluded from doing 
so, in many of these cases. Is there anything that bothers you out- 
side of the scope of law enforcement that you would change? 

Mr. Ramsey or Mr. Cassilly? 

Mr. Cassilly. I think there is some concern over the industry, 
the folks who work for the industry being intimidated somewhat by 
complying with a legitimate law enforcement request by the fear of 
becoming criminally or civilly liable. And I think that needs to be 
clarified, as well as more specifics on what sort of cooperation law 
enforcement can expect back from the industry, when we can ex- 
pect to receive information and that sort of thing. 

Mr. Black. If I could respond, yes, certainly I think industry 
very much wants a clearer standard. And one of the reasons we 
want a reasonably high standard is because being deluged with 
tens of thousands of requests at a lower standard frankly becomes 
quite burdensome and requires decision-making at a much dif- 
ferent level. 

First of all, keep in mind, we have a wide range of companies 
who may get involved here. We are not just talking big Internet 
platforms. We are talking a lot of companies that may be much 
smaller, do not have legal counsel, do not have a range of capa- 
bility and structure to deal with that. 

So, particularly, there was some reference to, I think in testi- 
mony, to a mandatory response time situation. Any fixed time 
would be very harmful. The DMCA uses the word “expeditiously” 
in terms of response — I think any legislation talking about industry 
response needs that flexibility because of the diversity of providers 
that exist. 

Mr. Chaffetz. Thank you. 

I now recognize the Ranking Member, Mr. Scott, for 5 minutes. 

Mr. Scott. Thank you. 

There are a number of exceptions in the bill. Mr. Black, should 
there be an exception if the evidence is getting away — that if you 
delay and get a warrant, the person will escape and you won’t 
know where they are? 

Mr. Black. Your question is with regard to the exception relat- 
ing to 

Mr. Scott. Where there are life and death exceptions, people’s 
lives are in danger. Do you have that exception? 

Mr. Black. Well, certainly 

Mr. Scott. What about, the bank just got robbed and the people 
are getting away, and if you can get the information right then, 
you might be able to catch the person, and if you wait 45 minutes, 
they would have gotten away. Is that an exception? 

Mr. Black. I think we start out with the assumption that the ex- 
ceptions that we see provide for most emergency situations, and 
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that to the extent the exception needs to be broader, there is a 
great deal of privacy risk at stake. And I would like to see the law 
enforcement justification as to why the current exceptions really 
aren’t adequate to cover specific 

Mr. Scott. Mr. Ramsey, would you want an exception for the 
evidence that is getting away? 

Mr. Ramsey. I think that would be appropriate for all law en- 
forcement — 

Mr. Scott. And how do you cover that — is there an exception 
now with other warrants, that if you had a search warrant, you 
need to get the information right away or it may get away, and 
then you get an after-the-fact warrant? 

Mr. Ramsey. You have hot-pursuit exceptions that — ^you have ex- 
ceptions to a warrantless arrest or situation. 

Mr. Scott. Okay, so a hot-pursuit type of warrant would be an 
exception that would — Ms. Crump, what do you think about a hot- 
pursuit exception? 

Ms. Crump. In the Fourth Amendment doctrine, that is well-rec- 
ognized exception, and I could imagine a reasonably crafted excep- 
tion here that encompassed the same idea. 

Mr. Scott. Okay. 

Who pays the costs of all of this? Mr. Black indicated a deluge 
of requests. That would obviously have cost implications to a phone 
company. Who pays the additional costs to responding to all of 
these requests? 

Mr. Black. Under some existing statutes, there are cost referral 
situations, and companies do get some compensation. I think we 
have to — while companies are not anxious to incur the burden 
without compensation, on the other hand we want to make sure 
that this does not become a profit center for companies. We do not 
want them encouraging law enforcement to come undertake unnec- 
essary and widespread surveillance in order to get revenue. 

Mr. Scott. Thank you. 

Do the different phone companies keep different data? Appar- 
ently, they can keep track of where you have been, because as you 
travel your phone pings the cell, so they can find out all the cells 
where you were. There are also business records of when and 
where you made a call. 

Do different companies keep different data, Ms. Crump? 

Ms. Crump. Yes, they do keep some different data, at least in 
terms of the length of time that they store the information. 

So, for example, we were able to obtain through a Public Records 
Act request a one-sheet document from the Department of Justice 
in which it summarized how long different carriers kept different 
forms of location information. So, for example, Verizon stores the 
cell phone towers used by a mobile phone for 1 rolling year; T-Mo- 
bile keeps it for 4 to 6 months officially but, quote, “really a year 
or more”; and AT&T Cingular retains it from July 2008. So who 
your carrier is impacts 

Mr. Scott. Is that the fact that you made a call or where you 
were? 

Ms. Crump. That is an excellent question that I would like to 
know the answer to. 
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Oh, I am sorry. Let me clarify that. That is where you were, but 
the precise nature of that information, how precise it is, is some- 
thing that neither carriers nor law enforcement has disclosed. 

Mr. Scott. Okay. But how long — if you made a call, how long is 
that kept? Is that a different list? 

Ms. Crump. That is a different list. 

Mr. Scott. Okay. 

Ms. Crump. And it is also on this piece of paper, but I don’t have 
it with me. 

Mr. Scott. Okay. 

Now, Ms. Crump, you said there was no difference between the 
historical record and realtime data, but should there be a different 
standard in getting information that you made a phone call from 
Times Square on New Year’s Eve, yes or no? Should there be a dif- 
ferent standard from realtime tracking? 

Because, but for the privacy, electronic privacy records, a fact 
that you made a phone call would be a business record that you 
could scoop up on a relevance basis. 

Ms. Crump. I agree with the general idea that as the information 
becomes more precise, it is more sensitive. However, the GPS Act 
provides a uniform standard, because law enforcement 

Mr. Scott. Even for getting a historic business record should be 
the same standard as realtime tracking? 

Ms. Crump. I don’t think it is fair to view cell phone location 
data as just another form of business record. Similarly, you know, 
our email is, in some sense, Google’s business record if we have a 
Gmail account because it is all stored there. I think today it is 
more like, you know, a safe deposit box. We are entrusting some- 
thing valuable about us to a third-party company, and that is dif- 
ferent from it being just the business record of a bank. 

Mr. Scott. Thank you, Mr. Chairman. 

Mr. Black. If I would have a chance to comment, I would very 
much echo that. I think the technology in the email reference was 
on point. If we go to the concept that the data used by technology 
companies to perform their functions are just business records, 
then a massive amount of information about everyone becomes 
available under a lower standard. 

Mr. Chaffetz. The gentleman’s time has expired. 

We will now recognize the gentleman from South Carolina, Mr. 
Gowdy, for 5 minutes. 

Mr. Gowdy. Thank you. Chairman Chaffetz. 

I will resist the temptation to ask about the expectation of pri- 
vacy with emails that can be easily forwarded to the rest of the 
world. And I will instead ask Ms. Crump, you gave a quote to the 
gentlelady from Texas which I tried to write down but I missed it. 
It had something to do with a credible — something. Credible inter- 
mediary? Credible objective? 

Ms. Crump. I am afraid that my memory is no better about what 
I may have said. 

Mr. Gowdy. I think you were referring to, it is better to have a 
neutral, credible, detached 

Ms. Crump. Magistrate judge, yes. 



81 


Mr. Gowdy. Right. Which then got me wondering who that cred- 
ible, neutral, detached magistrate is with the automobile exception 
to the Fourth Amendment. 

Ms. Crump. There is an exception when there is 

Mr. Gowdy. Then there is no credible, neutral, detached inter- 
mediary, correct? 

Ms. Crump. Although in general the Fourth Amendment requires 
you to go to a 

Mr. Gowdy. I wasn’t asking in general. I was asking about one 
of the exceptions. 

Ms. Crump. There are exceptions in the automobile 

Mr. Gowdy. How about exigent circumstances? Who is the cred- 
ible, detached, neutral intermediary with the exigent circumstances 
exception? 

Ms. Crump. Similarly, because the circumstances are exigent, 
there is no requirement that you go to a judge. 

Mr. Gowdy. How about the public safety exception? Who is the 
credible, neutral, detached intermediary between law enforcement 
and private citizens with the public safety exception? 

Ms. Crump. I think you are pointing to another extreme example 
where we all recognize that there is 

Mr. Gowdy. How about the plain field doctrine? Who is the cred- 
ible, neutral, detached intermediary between the public and law 
enforcement with the plain feel doctrine? 

Ms. Crump. Because the plain feel doctrine doesn’t implicate the 
same privacy interests, there is no 

Mr. Gowdy. How about the plain view doctrine? 

Ms. Crump. I would have the same answer to that. 

Mr. Gowdy. Border exceptions? 

Ms. Crump. It depends on the nature of the search at the border, 
but 

Mr. Gowdy. Search incidents to arrest? 

Ms. Crump. I think what you are driving at is that there 

Mr. Gowdy. What I am driving at is, there are lots of exceptions. 

Ms. Crump. That is right, but that doesn’t mean there isn’t a 
rule and that the rule isn’t probable cause. And that there is a good 
reason 

Mr. Gowdy. Well, some would argue the rule has been swallowed 
by the exceptions. I would imagine your entity might argue from 
time to time that the rule has been swallowed by the exceptions, 
not to put words in your mouth, but — well, let me ask you this. 
Can you help me come up with all the instances in the criminal 
justice system where probable cause is not required? 

Ms. Crump. I think you have come up with a pretty good list al- 
ready — 

Mr. Gowdy. Yeah, but you 

Ms. Crump [continuing]. But they have a common unifying 
theme, which is usually either a reduced expectation to privacy be- 
cause the information sought isn’t sensitive 

Mr. Gowdy. How about drug dogs? What is required to bring a 
drug dog and search a car? 

Ms. Crump. A drug dog and a car? There is generally no require- 
ment that there is probable cause. 

Mr. Gowdy. Well, it is an articulable suspicion, right? 
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Ms. Crump. Well, the Supreme Court is reconsidering drug dogs 
sniffs right now, hut currently the standard 

Mr. Gowdy. But now it is articulable suspicion. So we have — at 
one level, you don’t have to have anything; you can just have a 
hunch. For instance, you can walk up to someone’s house and do 
a knock-and-talk, and you don’t have to have any basis to be able 
to do that. Police can stop and ask people questions, and they don’t 
have to have any basis for doing that. 

And then you can have an articulable suspicion, you can have a 
reasonable basis, and then you get to probable cause, which is the 
same standards you have to have to arrest someone. So you really 
want police to be able to make an arrest before they can get histor- 
ical GPS information. You want the same standard to get the his- 
torical GPS information as you would have to have to make an ar- 
rest. 

Ms. Crump. The arrest standard, like the house search and other 
standards, is a probable cause standard, and it is predicated on 

Mr. Gowdy. I am asking your opinion. You think that we should 
be able to make an arrest before we can get the historical GPS in- 
formation. 

Ms. Crump. Well, I don’t think the standard for — no, I don’t. And 
the reason is, to get probable cause for location information, you 
have to have a good reason to believe that a search will turn up 
evidence of a crime. So it is a different type of probable cause than 
actually physically arresting someone. 

Mr. Gowdy. There is not a different definition for probable cause 
depending on whether it is an investigation or whether it is an ar- 
rest. 

Ms. Crump. Well, when you are going to arrest someone, you 
have to have probable cause that they have committed a crime. 

Mr. Gowdy. Right. 

Ms. Crump. The only distinction I was drawing is that, to obtain 
geolocational information, you have to have probable cause to be- 
lieve that a search will turn up evidence of a crime. 

Mr. Gowdy. My time is up. 

Mr. Chaffetz. The gentleman’s time has expired. Yields back. 

We now recognize the gentleman from Georgia for 5 minutes. 

Mr. Scott. Thank you. 

This is an area with unlimited implications, and so I appreciate 
all of the witnesses today for your diligence in responding to some 
difficult questions. 

I will ask one, though, and it may not be too difficult, but — I un- 
derstand that when you walk into a grocery store that there are 
things in the grocery store that connect with your cell phone and 
they can track you walking around in the store and then send a 
message to a screen, where you might happen to be pondering 
whether or not you should do what you always do at the store, and 
that is get that cherry pie even though you are on a diet and every- 
thing. And them, boom, they start flashing out to you, “Cherry pie, 
50 percent off,” you know, “Get one now,” you know. 

Is that a violation of — would that be a violation of this proposed 
legislation? 

Mr. Black. I suppose I ought to try that. No, we have a con- 
sent — we have users, basically, you have — the owner of the cell 
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phone has a choice as to those kinds of services being made avail- 
able or not. 

Mr. Scott. Well, I mean, a lot of people have cell phones and 
then we come up with new technology 

Mr. Black. That is right. 

Mr. Scott [continuing]. And there was never a consent given in 
the agreement for the cell phone. 

Mr. Black. I think it is important to point out that our industry 
has found a great deal of sensitivity in the public to privacy. 
Facebook has made some changes, and there have been outcries. 
Google merely consolidated existing privacy policies, and there was 
wild outcry. There is an FTC oversight that has taken actions in 
a number of places. Consumer boycotts exist in many instances. 

The empowerment of the user community out there is very, very 
real. And I think you have a lot of free market operation to balance 
and control with, if you will, abusive practices. People may exceed 
what somebody might find comfortable, but there really are mecha- 
nisms in that world to push back. 

Mr. Scott. So you are suggesting 

Mr. Black. That is different than somebody knowing and being 
able to use that in an adversarial proceeding, which I think is what 
the bill is largely focused at. 

Mr. Scott. Well, if there was a crime committed with the DNA 
from a discarded paper plate with the residue of cherry pie on it, 
and law enforcement subpoenaed the records of the Harris Teeter 
store to see whether or not you purchased a cherry pie on a par- 
ticular day shortly before the 

Mr. Black. If there was only one cherry pie sold in the city and 
somebody bought it, maybe you could build a probable cause stand- 
ard. 

Mr. Scott. Yeah, I mean, but I still need to get an answer for 
my question. Does this kind of scenario, the store or whoever it is 
in control of capturing the data while you are walking around in 
the store, would that be an illegal act under this legislation that 
is proposed? Can someone answer that? 

Ms. Crump. I believe I can answer. And as I read the definition 
set out in the statute, that is not covered, because the definitions 
target the provider of an electronic or remote computing service or 
the provider of a geolocation information service. And because the 
store itself is not one of those services, I don’t believe, at least 
under the current draft, that it is covered. 

Mr. Scott. Well, then, would it cover law enforcement? 

Ms. Crump. To take your cherry pie DNA example, I think in 
that case it wouldn’t be covered, because this bill deals exclusively 
with tracking people through electronic devices. You know, if law 
enforcement was trying to track someone, you know, the cherry-pie 
eater’s movement after the fact, the bill would cover it if they did 
so through their cell phone or GPS. But it wouldn’t cover the pre- 
cise scenario you mentioned. 

If you don’t mind, I will also mention that your initial hypo- 
thetical was quite realistic. There was a mall that actually tried 
tracking people’s movements through their cell phones. And when 
the public found out about it, their outrage was so great that the 
mall quickly announced it had discontinued the practice. And I 
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think that is a good example of how location information is still 
considered to be quite sensitive even in this digital age and why 
this act is so important. 

Mr. Chaffetz. Thank you. The gentleman’s time has expired. 

We will now recognize the gentlewoman from Texas for 5 min- 
utes. 

Ms. Jackson Lee. First, I want to acknowledge I think this hear- 
ing is enormously important, and I think the work that is being 
done by law enforcement is equally important. 

Mr. Ramsey, I did not mention that local law enforcement is also 
involved in counterterrorism, to the extent that individuals spread 
out into our respective communities — and as I indicated, I am on 
Homeland Security. 

But as I listened to my good friend from South Carolina lay out 
a litany of exceptions, I would make the argument that there is a 
framework upon which you can work with. And I just want to ask 
a simple question. Law enforcement is not interested in extin- 
guishing privacy rights of citizens, is — I am asking you, Mr. 
Ramsey. 

Mr. Ramsey. You are asking me 

Ms. Jackson Lee. Yeah, that is not your mission, to eliminate 
privacy rights of citizens. 

Mr. Ramsey. No, it is not. No. 

Ms. Jackson Lee. All right. So I just wanted to say that because 
I want to move on to other questions. And, as I said, this is a week 
where we are honoring police officers, and having been a former 
city court judge, I have dealt with officers a lot. 

But I want to focus on Mr. Black and Ms. Crump. As I have said, 
as I listen to the long litany of exceptions, I become more comforted 
that we need to ensure that we have the right standards in this 
legislation that I am very interested in, H.R. 2168, but we do have, 
I think, a need to balance both rights. Because in the course of the 
stop-and-frisk — I am just on a metaphor statement here — in the 
course of the stop-and-frisk, innocent people are stopped and 
frisked. And that is the physical act of stopping and frisking indi- 
viduals. And we know that, in the course of that that is under the 
label of law enforcement, there are individuals being stopped for no 
reasons whatsoever. And I think we have to protect against that. 

So I just want to ask the question to Mr. Black. In these compa- 
nies, generally, as you represent them, do they have a direct-dial 
number? Is there a number that law enforcement is assigned to? 
Or is it a random, pick up the phone, speaking to someone trying 
to get information? 

Mr. Black. Well, certainly, in larger companies, there are well- 
established procedures to integrate with entities. 

Ms. Jackson Lee. Right. 

Mr. Black. However, having said that, first of all, a lot of small 
companies are not able to do that. And even the largest companies, 
we are not dealing with just the Department of Justice or just even 
the State police; we are talking about jurisdictions of State, local, 
county, many, many different jurisdictions that may choose to try 
to contact companies in a variety of ways and different people. 

So it is not clear that there is an easy channel always, even if 
both sides want it. The diversity — some, you know, a district attor- 
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ney, a sheriff in a variety of places — I mean, many, many requests 
come in. 

And that is one of the problems I think we see, is that the — 
knowing this information is potentially — is there, the incentive to 
want it even when the need isn’t that great, when, “Gee, it might 
he nice to know that,” will geometrically expand the requests, in- 
crease the burden, and increase the amount of privacy intrusion 
that may not really be highly justified. 

Ms. Jackson Lee. And I wanted to get that on the record, be- 
cause you all fall sometimes in the category of too big to fail or too 
big to be big, and so it looks as if you should be able to handle ev- 
erything. But I think privacy is as important for the larger compa- 
nies with larger portfolios of customers as it might be for the small 
guys. 

The other point I want to make is that, if I am correct, I believe 
that there is certainly the right of police when it is a child victim 
involved to pursue this information and be insistent. I think under 
the legislation, if I am not mistaken, that children provide the 
cover for getting information quickly. 

My next question would be, is there a sense of intimidation? If 
you are talking about different size companies, law enforcement 
calls up, is there a sense of intimidation or a sense of the urgency 
without seeking protections because you have law enforcement? 
Which means — it is the nexus to my point, that we need some pa- 
rameters. 

Mr. Black. Let me say first of all, I think my companies can be 
expected to be good citizens. We have numerous instances of receiv- 
ing awards, some from law enforcement entities, for the rapid re- 
sponse in that situation. 

Ms. Jackson Lee. And that is good. 

Mr. Black. Willing to do that. The difficulty, as I say, you start 
creating fixed rules that become very difficult to operate for dif- 
ferent kind of companies in different kind of settings. But, clearly, 
an expeditious type standard — yes, we want to respond. There is no 
desire to do anything but respond in emergency-type situations. 

I think, frankly, the availability of the exceptions in the legisla- 
tion help underline the importance of the basic standard itself. The 
more we see good flexibility in the exceptions, the more necessary 
and desirable and dependable it is to have the probable cause 
standard. 

Mr. Chaffetz. Thank you 

Ms. Jackson Lee. I ask the Chairman for an additional 1 
minute, just unanimous consent. I just need to follow up with Ms. 
Crump, just for a moment, please. 

Mr. Chaffetz. Without objection, so ordered. 

Ms. Jackson Lee. I thank you. 

Ms. Crump, with the litany of exceptions that, I must say, that 
you handled very well as you repeatedly were being posed a series 
of criminal exceptions that we understand here, doesn’t that give 
you the sense that although we want to adequately equip our law 
enforcement, that there are sufficient exceptions that we should be 
very keenly pointed toward the privacy issues, and that the oppor- 
tunity to track where you are going, where you have been, the op- 
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portunity to mislabel someone and misidentify, is crucial for us get- 
ting in front of this new technology instead of behind it? 

Ms. Crump. Thank you for the question, and I couldn’t agree 
more with what you said. There are numerous exceptions already 
to the Fourth Amendment, but that doesn’t change the fact that 
the benchmark is a warrant and probable cause and that that 
serves a valuable function when law enforcement wishes to access 
deeply sensitive information about all of us. 

The Fourth Amendment we often bemoan as having been eroded 
away too far, but there is a reason it was written into the Constitu- 
tion. It is because the Founders intended there to be a balance be- 
tween law enforcement interests and privacy interests. And this 
bill would help restore that balance. 

Ms. Jackson Lee. Let me thank the Chairman, and I yield back 
my time. 

Mr. Chaffetz. Thank you. 

I would like to thank all of our witnesses for your time and your 
testimony and your expertise and making the time and effort to be 
here. 

Without objection, all Members will have 5 legislative days to 
submit to the Chair additional written questions for the witnesses, 
which we will forward and ask the witnesses to respond as prompt- 
ly as they can so the answers to these questions can be made part 
of the record. 

Also, without objection, all Members will have 5 legislative days 
to submit any additional materials for inclusion in the record. 

Hearing no objection, so ordered. 

With that, again, I would like to thank the witnesses. 

The hearing is now adjourned. 

[Whereupon, at 11:52 a.m., the Subcommittee was adjourned.] 
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Thank you, Mr. Chairman, for the invitation to submit this statement for the record for 
this hearing on H.R. 21 68, the “Geolocational Privacy and Surveillance Acf’ (“GPS Act”) to be 
held on May 1 7, 2012 before the House Subcommittee on Crime, Terrorism, and Homeland 
Security. We ask that this statement be included in the hearing record. 

EPIC thanks you, Representatives Chaffetz and Goodlatte, and the members of the 
Subcommittee, for your attention to this important issue. As communications technologies 
evolve, new forms of personal information are generated that require new legal safeguards. Your 
decision to hold this hearing will help protect important privacy rights. 

The Electronic Privacy Information Center (“EPIC”) is a non-partisan public interest 
research organization established in 1994 to focus public attention on emerging privacy and civil 
liberties issues. EPIC fully supports the Committee’s examination of the Electronic 
Communications Privacy Act of 1986 (“ECPA”)* and location information. Mobile devices have 
become ubiquitous in modern society, and service providers now routinely record and transmit 
users’ locations. In many instances, this can provide significant benefits to users of new 
communications services. But in some circumstances, this also poses real risks to privacy and 
security. 

In light of these developments, it is important to establish clear standards to protect the 
privacy of users by ensuring that locational data is not misused. In this statement, we outline 
several steps that the Subcommittee can take to strengthen the privacy protection of US 
customers whose data is collected and used by companies around the world. 

I. EPIC has a Longstanding Interest in the Privacy of Location Data 

In 1999, Congress amended the Communications Act of 1934 with the Wireless 
Communication and Public Safety Act of 1999. ^ The Act required wireless carriers to 
implement 91 1 emergency calling and added location privacy provisions to the 
Telecommunications Act. After the Act was passed, the Federal Communications Commission 
(“FCC”) considered a rulemaking to develop guidelines governing the collection and use of 
location data generated by wireless communications systems. 

EPIC filed comments in April 2001 encouraging the FCC to follow through on the 
rulemaking process because “location privacy is one of the most significant issues facing 
American consumers and the expeditious establishment of comprehensive, technologically 
neutral privacy protections would serve the public interest.”’ EPIC encouraged the FCC to enact 
rules that would give consumers “meaningful control over the collection and use of location 


' Pub. L. No. 99-508, lOOStat. 1 848 (1986) (codified at 18 U.S.C. § 25 10 et seq.). 

-Pub. L.No. 106-81, 113 Stat. 1286 (1999f 

’ EPIC, Comments to the F.C.C. on Commission Public Notice, DA 0 1 -696 (Apr. 6, 200 1 ), available al 
http:/Avww.cpic.org/privacy/\virclcss/cpic_commcnts.pdf. See also. Marc Rotenberg, Communieallon 
Privacy: Implications for Newark Design. 36 Comm. ACM 61 (Aug, 1993). 
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May 17, 2012 House Subcommittee on Crime, Terrorism, 

and Homeland Security 
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data.”'* In later reply comments, EPIC encouraged the FCC to “carefully constrict the 
circumstances under which implied consent could be utilized, if at all” ' and to clarify the 
meaning of several key terms — including “location infonnation” — that are used in the Act. EPIC 
recommended a number of other rules, including a rule that would require consent to be specific 
as to the third party that can receive the information and the purpose for which that information 
will be used by that party, and a rule that would require carriers to keep a record of consent for as 
long as the permission is valid.'" With all of these steps, EPIC sought to give users greater control 
over their location information by requiring opt-in consent for location tracking. 

EPIC has previously submitted statements before the House Committee on the Judiciary 
on the importance of providing safeguards for location privacy. In a June 20 1 0 statement, EPIC 
offered several steps that could be taken to strengthen the privacy protection of US customers.’ 
EPIC recommended that users be fully infomied of type of location data being collected and the 
purpose of the collection. * EPIC also recommended that location data not be collected or shared 
without affirmative consent, and that companies provide users with a simple and free means to 
refuse the processing of location data for a specific connection or transmission.^ 

More recently, EPIC submitted amicus briefs in several federal court cases involving 
location privacy. In United States v. Jones, the Supreme Court considered whether the 
government’ s warrantless installation and use of a GPS device to track a private vehicle 
implicated the Fourth Amendment."' EPIC filed an amicus brief in Junes, arguing that the 
warrantless use of GPS tracking devices could enable pervasive, suspicionless surveillance of 
Americans with no judicial supervision. ' ' Ultimately, the Supreme Court unanimously ruled that 
the warrantless use of a GPS tracking device by the police violated the Fourth Amendment. The 
Court said that a search occurs where “the Government physically occupie[s] private property,” 
like a car, “for the purpose of obtaining information.”*’ Concurring opinions by Justices 


* EPIC, Reply Comments to the F.C.C. on Commission Public Notice, DA 01-696 (Apr. 24, 2001), 
available nt http://wv\vv.epic.org/privacv/wireless/epic_replv.pdf 

^ Id. 

* ECFA Reform and the Revolution in Location Based Technologies and Services: Hearing Before the H. 
Suheomm. on the ConslHullon, Civil Rights, and Civil I.iherties of the H. Comm, on the Judiciary, 1 1 1th 
Cong. 109 (2010) (statement of tire Electronic Privacy Lifomiation Center), available a! 
https://epic.org/privacv/ECPA_Statement_2010-06-24.pdf 

® Id. at 7. 

"Id. 

United States v. Jones. 132 S. Ct. 945 (2012). 

" Brief of Amici Curiae Electronic Privacy Infonnation Center (EPIC) arrd Legal Scholars in Support of 
Respondent, United States v. Jones, 132 S. Ct. 945 (2012) (No. 10-1259), available at 
https://cpic.org/amicus/joncs/EPIC_Joncs_amicus_frnal.pdf 
'"Jones, I32S. Ct. at949. 
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Sotomayor and Alito argued that the use of a GPS tracking device would also violate an 
individual’s reasonable expectation of privacy under a traditional Katz analysis.*^ 

Following Jones, EPIC submitted two amicus briefs in cases involving warrantless access 
to cell phone location records. Tn Slate v. Karls,'* EPIC argued that the New Jersey Supreme 
Court should overturn a lower court decision holding that an individual has no legitimate 
expectation of privacy in the location of their cell phone.*’ The cell phone tracking techniques in 
the case, EPIC argued, “[are] more invasive than the GPS tracking in Jones ’’*^ Similarly, EPIC 
filed a brief in the Fifth Circuit urging the court to uphold a lower court ruling that the disclosure 
of historical cell phone location records without a warrant would violate the Fourth 
Amendment.*^ EPIC argued that this opinion should be upheld, in light of the Supreme Court's 
recent decision in Jones, because cell phone location records are collected without the 
knowledge or consent of users. ** The records in the case, EPIC argued, provide a 
“comprehensive map of an individual’s movements, activities, and relationships, . . . precisely 
the type of information that individuals reasonably and justifiably believe will remain private.”*^ 

These activities, which EPIC has pursued for more than a decade, indicate the growing 
importance of locational data for personal privacy. 

11. Location Privacy Concerns Are Snbstantial and Growing More Acnte 

Location privacy issues are becoming more substantial as the number of mobile devices 
increases and location methods become more precise. The number of mobile phone users in the 
United States increases every year. The Pew Research Center found that 77% of all adults had a 
cell phone or other mobile device in 2008.™ By 2012, that figure had risen to 88%.“' 


’’ Jones, 132 S. Ct. at 954-58 (Sotomayor, J., concurring); Jones, 132 S. Ct. at 958-64 (Alito, J., 
concurring in the iudgment). 

22 A.3d 1 14 (Sup. Ct. N.J. 201 1), vert, granted, 209 N.J. 97 (201 1). 

” Elec. Privacv Info. Ctr., State v. Karls https://epic.org/amicus/location/earls/ (last visited Mav 16, 

2012 ). 

Brief of Amicus Curiae Electronic Privacy hifonnation Center, State v. Earls, 209 N.J. 97 (201 1) (No. 
68,765), available at https://cpic.org/amicus/location/carls/EPIC-Earls-Amicus-NJ-SCt.pdf 
*’ Elec. Privacy Info. Ctr., In re Historic Cell-Site Location Information (last visited May 16, 2012) 
https://epic.org/amicus/location/cell-phone-tracking/. 
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Site Data, 747 F. Supp. 2d 827 (S.D.Tx. 2010), appeal docketed. No. 11-20884 (5th Cir. Feb. 22, 2012), 
available at https://cpic.org/amicus/location/ccll-phoiic-tracl‘dng/EPlC-5th-Cit-Amicus.pdf 

Pew Research Center, Teens and Internet Over the Past Five Years: Pew Internet Looks Back (Aug. 19, 
2009), available at http:/A\ww.pewinternet.org/Reports/2009/14— Teens-and-Mobile-Phones-Data- 
Memo.aspx. 

Aaron Smith, 46% of American Aciulis are Smariphone Owners, Pew Research Center at 2 (Mar. 1, 
2012), available at 
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American consumers carry their mobile devices everywhere, all day, every day. The 
location records created by these devices reveal aspects of consumers’ social, political, 
professional, and educational lives. Every time an individual uses their mobile phone, a record is 
created.^* The average individual sends or receives calls, text messages, or Internet data more 
than fifty times per day, generating a constant stream of location data. For certain populations, 
mobile phone are even more ubiquitous. Young adults, for example, send an average 1 00 text 
messages per day.*^' All of these uses generate location data. The location records created provide 
a comprehensive map of people’s movements, activities, and relationships over the course of 
many weeks and months — precisely the type of information that individuals reasonably and 
justifiably believe will remain private. 

As technology improves, this location data will become more precise. Already, cell-site 
location data can be used to pinpoint an individual’s location to the level of a room or floor in a 
building. Femtocells — low-power base stations used to route calls between consumers and the 
cellular network — have a range as small as ten meters. Experts estimate that by 2016, 
femtocells will constitute 88% of all cell sites globally. Some carriers even triangulate user 
location for emergency and other purposes.^’ Thus, as the technology develops further, cell 
phone companies will compile increasingly detailed location records of their users. 

Mobile smart phones also contain built-in GPS functionality for location-based services. 
These devices enable consumers’ location information to be collected not just by the carrier or 
platform developer, but by application developers and third-party advertisers. An examination of 
101 popular iPhone and Android applications by the Wall Street Journal revealed that 56 
applications either collected or transmitted location information to third parties.^* 

Other companies are also increasingly collecting the location information of consumers. 
Foursquare, with approximately 3 million users, is a service that lets users “check in” to a place, 
broadcast this fact to other individuals, and track the history of where they’ve been and with 


See Stephanie K. Pell & Christopher Soglioian, Can You See Me Now? Toward Reasonable Standards 
for Law Enforcement Access to Location Data that Congress Could Enact. 26 Berkeley Tech. L.J. 
(fortlicoming 2012). 

Aaron Smith, 2 lYo of Text Messa<^e Users Prefer Textin'^ to Voice Calls, and Younts Adults Stand Out 
In '/heir Use of i'ext Messaging, Pew Research Center at 2 (Sept. 19, 201 1), available at 
http://www.pew'intemet.org/~/media//Files/Reports/2011/Americans%2 0and%20Text%20Messaging.pdf. 

Id 

AT&T 3G Microcell — Wireless Signal Booster. AT&T. 
http://ww\v .att.com/shopAvirclcss/dcviccs/3gmicroccll.jsp (last visited May 16, 2012), 

Press Release, Informa Telecoms & Media, The Shape of Mobile Netw-orks Starts to Change as 
Femtocells Outnumber Macrocells in US (Oct. 21, 2010), 
mvvv.smallcellfomm.org/pressreleases.php?id=269. 

Paul A Zandbergen, Accuracy of iPhone Locations: A Comparison of Assisted GPS, WiFi and Cellular 
Positioning, 13 Transactions GIS 5, 11 (2009). 
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whom.*'^ Businesses are taking advantage of the service by offering discounts and coupons to 
individuals who “check in” to their location. Foursquare also has an API that allows developers 
to build on its platfomi. One recent smartphone application that provoked a particularly strong 
reaction, Girls Around Me, used information from Foursquare and Facebook to provide a map of 
women around a user’s location.^" As part of another program, Google collected MAC addresses 
(the unique device ID for Wi-Fi hotspots) and network SSIDs (the user-assigned network ID 
name) tied to location information for private wireless networks.^* The “street view” vehicles 
also intercepted Wi-Fi “payload” data, which included emails, passwords, usernames and 
website URLs.^^ Advertisers and marketers also use location information in consumer data 
profiles, enabling them to track consumers through their daily journey and target them with 
advertisements based on their location.^^ 

Perhaps because of the amount of infomiation that can be derived from location data, this 
data is often considered sensitive or personally identifiable. For example, the Federal Trade 
Commission’s amendments to the Children’s Online Privacy Protection Act (“COPPA”) Rule 
update the definition of Personally Identifiable Information in response to changes in technology, 
the increased use of mobile devices, and new business practices. Under the new Rule, 

“personal information” includes “geolocation information.”^^ The FTC’s 2012 report considers 
location data to be “sensitive” information the collection of which requires the affirmative 
consent of consumers. 

Not surprisingly, consumers have significant concerns about the protection of location 
privacy. A recent survey found that 77% of cell phone users did not want to disclose their 
location to smartphone “Apps” or developers. Consumers also strongly object when companies 
secretly enable location-tracking services. In May 2011, researchers discovered that an 


Foursquare, https;//foiirsqiiare.com/ (last visited May 16, 2012). 
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http://googlcpolicycuropc.blogspot.eom/2010/04/data-collcctcd-by-googlc-cars.hbul. 
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(describing advances in Google’s advertising ecosystem). 
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Proteclion Rule (Sept. 15, 2011), http://vvvvvv.ftc.go\7opa/2011/09/coppa.shnu. 

” Children’s Online Privacy Protection Rule, 76 Fed, Reg. 59804, 59813 (proposed Sept. 27, 201 1) (to be 
codified at 16 C.F.R. pt. 3 12), http://v\vvw.ftc.gov7os/20l 1/09/1 10915coppa.pdf 
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unencrypted file on Apple iPhones stored a ten-month record of a user’s location data.^* During 
the 201 I holiday season, several malls decided to use shoppers’ cell phones to track their 
movement from store to store. In each case, consumers were outraged and members of 
Congress investigated the business practices. * 

III. The GPS Act Sets Out the Necessary Elements of an Effective Privacy Law 

A. The Act Establishes Appropriate Circumstances for the Collection of Location Data 

The Act prohibits “[a]ny person” from intentionally intercepting or disclosing location 
data."'* The Act also prohibits the use of location infonnation by any person “knowing or having 
reason to know that the information was obtained through the interception of such information in 
violation of this [Act].”'** Finally, the Act prohibits the disclosure of location infonnation for the 
purposes of obstructing a criminal investigation.'*^ These prohibitions mirror the protections 
found in ECPA, which also prohibits the interception, disclosure, and use of wire, oral, or 
electronic communications. 

Like ECPA, however, the Act does not impose an absolute prohibition on the collection 
or use of location data. Information acquired in the normal course of business may be used or 
disclosed if doing so is “a necessary incident to the rendition of the service or to the protection of 
the rights or property of the provider of the service.”'*'* Location information may be intercepted 
through “any system that is configured so that such information is readily accessible to the 
general public.”'*^ The Act also allows individuals to consent to the interception of their location 
information, and parents are permitted to give consent on behalf of their children.'** Location 
information may also be used in emergency situations or in situations involving the theft of the 
device sending geolocation information.'*^ Finally, as discussed below, the Act contains an 
exception for information obtained pursuant to a warrant. 


’** Nick Bilton, Tracking File Found in iPhones. N.Y. Times, (Apr. 20, 2011) 
https ://www.n\times. com/201 1/04/2 l/business/2 ldata.html. 

’* Ken Wagstaff Will Your Mall Be Tracking Your Cellphone Today?, Time, (Nov. 25, 2011), 
http://tcchland.timc.eom/2011/l l/25/\vill-your-mall-bc-tracking-your-ccllplionc-today/. 

See Letter from A1 Franken, Chairman, Subcomm. on Privacy, Tech, and the Law, to Steve Jobs, CEO, 
Apple Corp. (Apr. 20, 201 1), available at 

http://www'.franken.senate.gov/fdes/letter/l 10420_Apple_Letter.pdf; see also Ashley Lutz, Ma/Zv Cell- 
Phone Devices lo Track Shoppers Hailed After Complainis, Bloomberg (Nov. 28, 2011), 
http://mobilc.bloombcrg.com/nc\vs/2011-ll-28/ccll-plionc-tcchnology-to-track-slioppcrs-lialtcd-aftcr- 
complaints. 

■** H.R. 2168, 112 Cong. §2602(a)(l)(A)-(B) (2012). 

Id. §2602(a)(l)(C). 

■*’M. §2602(a)(l)(D)(i). 

^ Id. §2602(b). 

■*’ Id. §2602(c). 

*Id. §2602(d). 

Id. §2602(f). 
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B. The Act Establishes a Warrant Standard for Government Access to Location Data 

Under the Act, a government entity may intercept location information “only pursuant to 
a warrant issued using the procedures described in the Federal Rules of Criminal Procedure.”"'* 
Warrant requirements provide important checks against government abuse. As Justice 
Sotomayor stated in Jones, “the Fourth Amendment’s goal [is] to curb arbitrary exercises of 
police power [] and prevent ‘a too permeating police surveillance.’”"*^ As the Supreme Court has 
long-recognized, a warrant requirement strikes a reasonable balance between the protection of 
privacy and the needs of law enforcement. “Although some added burden will be imposed upon 
the Attorney General, this inconvenience is justified in a free society to protect constitutional 
values.”"’" Here, a warrant requirement enables legitimate access to location information by law 
enforcement while protecting the privacy of individuals. 

Although the Act makes clear that Government interception of location information is 
unlawful absent a warrant, it also provide an exception for emergency situations, similar to the 
emergency exception in ECPA, 18 U.S.C. § 3125. While this exception includes broad language 
about “emergency situations” that involve “conspiratorial activities,” it also makes clear that, 
even in an emergency, an officer intercepting location information must apply for a warrant 
within 48 hours of interception.*' In the event that the warrant application is denied, the 
information “shall be treated as having been obtained in violation of this chapter and an 
inventory shall be served on the person named in the application.”*^ This provides a strong 
deterrent to any officer intercepting location information without sufficient grounds for a 
warrant. 

C. The GPS Act Establishes a Private Right of Action to Ensure Enforcement 

Importantly, the Act applies to private parties as well as law enforcement. The Bill 
prohibits the interception and disclosure of location information by “any person,” a term that 
includes private companies and individuals.'* The Bill’s civil damages provision provides that 
“any person whose geolocation information is intercepted, disclosed, or intentionally used in 
violation of this chapter may in a civil action recover from a person, other than the United States, 
which engaged in that violation such relief as may be appropriate.”*"* The Bill’s damage 
provision allows plaintiffs to recover the greater of “actual damages suffered by the plaintiff and 


““ Id. §2602(h)(2). 

■*’* United Slates v. Jones. 132 S. Ct. 945. 956, (2012) (quoting United States v. Di Re, 332 U.S. 581. 595 
(1948)). 

United States V. U.S. Dist. Court for E. Dist. ofMich.. S. Djv.,407U.S. 297,299(1972). 

*‘ H.R. 2168, 112 Cong. § 2604(a) P0i2). 

§ 2605(b) (2012). 

§2602(a)(l). 
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any profits made by the violator as a result of the violation” or “statutory damages of whichever 
is the greater of $100 a day for each day of violation or $10,000.”'" 

Private rights of action strengthen enforcement and allow individuals to seek remedies. 
They empower consumers to enforce the law themselves, create a strong disincentive for the 
irresponsible handling of consumer data, and provide a necessary backstop to the current 
enforcement scheme. 

Statutory damage provisions ensure that individuals can seek compensation for and deter 
privacy violations. Harms suffered as a result of privacy violations are often difficult to quantify, 
and include intrusions upon individuals’ autonomy, mental and emotional distress, loss of 
reputation and trust, and an increased risk of identity theft, financial loss, erroneous credit 
information, and even bodily harm. Thus, privacy laws frequently feature statutory damage 
provisions to ensure adequate enforcement of privacy interests.'" 

IV. The European Commission Has Provided an Effective Model for the Protection of 

Location Privacy 

Concerns regarding locational privacy are arising in other countries, as well. The 
approach of the European Commission, in particular, provide the United States with a possible 
model to protect the privacy of locational data. With Directive 2002/.‘i8 on Privacy and 
Electronic Communications, also known as E-Privacy Directive,'^ the European Commission has 
created an effective framework for the regulation of locational data. 

The Directive requires that location data other than traffic data be processed 
anonymously or with the consent of the individual, and provides protections to ensure that this 
consent is meaningful.'* Obtaining this consent requires informing the user of the type of data, 
the purpose of the collection, the duration of the collection and whether a third party will be 
doing the processing. Consent may be withdrawn at any time, and there must be a simple and 
free means for a user to refuse the processing of location data for a specific connection or 
transmission. Finally, the processing of data is restricted to what is necessary for providing the 
value-added service. 

The Article 29 working party, an E.U. advisory group of experts on privacy and data 


” M. §2605(c). 

See Fair and Accurate Credit Transactions Act, 15 U.S.C. §§ 1681 el seq/. Electronic Communications 
Privacy Act of 1986, 18 U.S.C. §§ 2510 Video Privacy Protection Act, 18 U.S.C. § 2710; Driver’s 

Privacy Protection Act, 18 U.S.C. § 2724; Telephone Consumer Protection Act, 47 U.S.C. § 227; Cable 
Communications Privacy Act, 47 U.S.C. § 551. 

" Directive 2002/58/EC of the European Parliament and of the Council of 1 2 July 2002 concerning the 
processing of personal data and the protection of privacy in tlie electronic communications sector 
(Directive on privacy and electronic communications), available at http://curopa.cu.int/curlcx/ 
pri/cn/oj/dat/2002/lj201/l_201200207.Hcn00370047.pdf 
Id. Alt. 9. 
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protection, has also issued an opinion on geolocation information. The opinion states that 
'^piior informed consent is also the main applicable ground for making data processing legitimate 
when it comes to the processing of the locations of a smart mobile device in the context of 
information society services.”'’” Furthermore, if the purpose for which the data is being used 
changes in a material way, consent must be obtained again.”* Finally, the opinion provides that 
individuals must be able to withdraw their consent without suffering negative consequences for the 
use of their device.”^ 

The Transatlantic Consumer Dialogue (TACD) has also passed a resolution on mobile 
commerce that addresses privacy concerns of consumers.”* The resolution states that the E.U. 
and U.S. governments should: “Protect consumer privacy in mobile commerce and prohibit use 
of any personal data (including purchase and location information) for purposes that consumers 
have not explicitly agreed to or that unfairly disadvantage them.” 

V. epic’s Recommendations 

A. There Should be Limitations on the Use of Location Data 

As currently drafted, the bill regulates the interception of location data, but once consent 
is obtained, there are no limitations on use of this information. The bill should be modified so 
that location data is only used consistent with the context in which it was provided. Moreover, 
consumers should have the opportunity to access the location data that is collected and there 
should be limitations on the period of storage for location data. 

In particular, a purpose-specification or “respect for contexf’ principle is likely to play an 
important role in the protection of location privacy. In many cases, location information is 
already collected by companies. The privacy risk, therefore, comes not in the collection (or 
“interception”) of location information, but in its use. For example, Verizon recently started 
using geolocation information for business, marketing, and advertising purposes after failing to 
give new customers meaningful notice of these changes. ”'* Currently, the Bill only prohibits the 
“use” of location information if that infomiation was obtained through interception, i.e., 
illegally.”” The application of a context- or purpose-specification principle would prohibit data 
use that violates contextual integrity, instead of only prohibiting data use that follows an illegal 
interception. 


”” Working Party 29 Opinion Geolocation services on smart mobile devices, 881/1 1/EN, May 2011, 
available al http://ec.curopa.cu/justicc/policics/privacy/docs/wpdocs/2011/wpl85_cn.pdf. 
atl4. 

Id. at 15. 
at 16. 

Transatlantic Consumer Dialogue, Resolution on Mobile Commerce, August 2005, 
http://\v\vw.tacd.org/cgibin/db.cgi?page-vie\v&config-admin/docs.cfg&id-283. 

”” See Flee. Privacy Info. Ctr., In re Verizon Wireless^ https://cpic.org/privacy/ftc/in_rc_vcrizon.html (last 
visited May 16, 2012). 

H.R. 216”8, 1 12 Cong. §2602(a)(l)(C). 
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B, The Act’s Consent and Public Information Exceptions Should Be Clarified 

The Act provides an across-the-board prohibition on the interception, disclosure, and use 
of location information, subject to a few discrete exceptions.'’’’ This framework makes clear that 
location infonnation is sensitive, protected, personal information that cannot be misused. 
However, in order for this prohibition to be effective the exceptions must be narrow and clear. 
The Act defines an exception allowing interception of location infonnation “pertaining to 
another person if such other person has given prior consent,”'’^ but it does not explain or imply 
what sort of consent is required. The Act also provides for an exception where location 
information is accessed “through any system that is configured so that such infonnation is 
readily accessible to the general public,”** without reference to the source or use of such 
information. If these exceptions are not narrowly defined, they could provide an enonnous 
loophole for third party collection and disclosure of sensitive location information. 

The Act’s consent exception is crucial. Section 2602(d) creates an exception for 
interceptions of location information “pertaining to another person if such other person has given 
prior consent to such interception.”*^ Companies have often intercepted location data without the 
affirmative consent of consumers. When Verizon and OnStar announced the collection of 
location information, they obtained “consent” by requiring consumers to opt out of such 
collection. And when several malls announced that they would begin monitoring the paths that 
consumers traveled from store to store, the “consent’ of consumers was obtained through a few 
lines of text attached to a mall directory. Arguably, announcing a practice and then requiring 
consumers to opt-out of that practice does not constitute “prior” consent as the statute requires, 
nor do inconspicuous notices provide a means of “giv[ing]” consent. However, the Bill’s 
language is sufficiently unclear to allow for the interception of location information through 
hidden notices or on an opt-out basis. The approach recommended by the FTC, the Trans- 
Atlantic Consumer Dialog, and EPIC, is to ensure that consent is meaningful by requiring 
consumers to opt in to the use of their location data. 

Section (e) of the Act outlines the exception for “public information,” which specifies 
that it is not unlawful to access location information “through any system that is configured so 
that such information is readily accessible to the general public.”™ Similar language in the 
Wiretap Act has recently been a source of confusion and controversy in the case of Google’s 
Street View program.” Section (e) is also likely to be a source of confusion, since it does not 
make clear whether configuring a system in such a way that “information is readily accessible” 
eliminates all protections for users of that system. It is also unclear whether accessing location 


§ 2602(a)(1). 

"W. § 2602(d)(1). 

“ Id. § 2602(e). 

® Id. § 2602(d). 

™ M.§ 2602(c). 

” See Elcc. Privacy Info. Ctr., Ben Jojje v. Google, http://cpic.org/aniicus/googlc-strcct-v icvv/ (last visited 
May 16,2012). 
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information through such a system would allow downstream misuses that would otherwise be 
prohibited. More fundamentally, the Act does not provide a definition, or even an example, of 
“readily accessible” information. 

Users may not know, or may not have control over, the configuration of a particular 
system that they use, like Foursquare or Facebook.’* Some systems enable location sharing by 
default, without the users’ explicit consent, and would thus broadcast location infomiation in a 
way that could allow downstream misuse. More importantly, privacy settings on social media 
sites typically allow different degrees of privateness. Even when a person has control over the 
configuration of such a system, as in the case of a home Wi-Fi network, it is unclear why a 
configuration that allows “access” to location information should authorize collection of that 
data, except to the extent that it indicates consent under Section (d).^^ As currently drafted. 
Section (e) causes confusion, acts as a potentially large loophole for all online infomiation 
collection, and provides no clear benefit over the consent-based exception. 

C. The GPS Act Should Apply Fair Information Practices to Location Data Stored by Private 
Actors 

Fair Information Practices (FlPs) can provide an effective solution to location privacy 
concerns. One recent formulation, the Consumer Privacy Bill of Rights contained in the 
Administration’s listed the following principles: 

• Individual Control: Consumers have a right to exercise control over what personal data 
companies collect from them and how they use it. 

• Transparency: Consumers have a right to easily understandable and accessible 
information about privacy and security practices. 

• Respect for Context: Consumers have a right to expect that companies will collect, use, 
and disclose personal data in ways that are consistent with the context in which 
consumers provide the data. 

• Security: Consumers have a right to secure and responsible handling of personal data. 


See lulia Angwin & Icrcmy Singcr-Vinc, Selling You on Facehook. WALL ST. J. (Apr. 7, 2012), at Cl. 
” This is especially clear in the case of recent apps that combine personal location information with other 
related infomiation to provide a “mapping” sendee. See Nick Bilton, Girls Around Me: An App lakes 
Creepy to a New Level, N.Y. Times - Bits (Mar. 30, 2012), 

http://bits.blogs.nytimes.eom/20l2/03/30/girls-around-me-ios-app-takes-creepy-to-a-new-level/. 

See Naomi GlcifMo/v Privacy Options, Facebook Blog (Mar. 19, 2008), 
http://blog.facebook. com/blog. php?post=l 1519877130. 

’’ It is important to note that one of the goals of Google’s Street View program was to collect and map the 
location of private Wi-Fi netw orks, which it did by logging network data from “open” netw orks across 
the world. See Elec. Priv-'acy Info. Ctr., Investigations of Google Street View , 
https://epic.org/privncy/streetview/ ((last visited May^ 16, 2012). Even Google recognized that such 
sweeping collection of personal infomiation required some degree of consent, and they eventually 
allowed users to “opt ouf’ of tlicir program. Kevin I. O’Brien, Google Makes Sweeping Concession on 
Data Collection, N.Y. TIMES, Now 16, 2011. 
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• Access and Accuracy: Consumers have a right to access and correct personal data in 
usable formats, in a manner that is appropriate to the sensitivity of the data and the risk of 
adverse consequences to consumers if the data is inaccurate. 

• Focused Collection: Consumers have a right to reasonable limits on the personal data that 
companies collect and retain. 

• Accountability: Consumers have a right to have personal data handled by companies with 
appropriate measures in place to assure they adhere to the Consumer Privacy Bill of 
Rights.’*’ 

FlPs are central to American privacy law, appearing most prominently in the Privacy Act of 
1974.” Trans- Atlantic consumer groups have recommended similar principles in the context of 
location privacy, such as transparency, data minimization, purpose limitation, limitation of data 
retention periods and data security.’* EPIC recommends that the Act apply FlPs to stored 
location data. 

VI. Conclusion 

EPIC respectfully requests that the Subcommittee take the following steps outlined in this 
statement: 

• Tn general, adopt FTPs to location data stored by private actors; 

• Specifically, adopt purpose-specification and data limitation requirements; 

• Clarify the consent exception to require that users affirmatively consent to data 
collection; 

• Clarify the public information exception to prevent the creation of a loophole for online 
information collection. 

Thank you for your consideration of our views. We would be pleased to provide any 
further information the Committee requests. 


” White Flouse, Consumer Data Privacy in a Networked World: A Framework for Protecting Privacy and 
Promoting Innovation in the Global Economy, Feb. 23, 2012, 
http:/Avw\v. whitchousc.gov/sitcs/dcfaul t/filcs/privacy -final. pdf 
” See Privacy Act of 1974, 5 USC § 552a. 

Transatlantic Consumer Dialogue, Protecting Mobile Privacy in a Hjper-local World, May 2012. 
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May 18, 2012 

The Honorable Lamar Smith 
Chairman 

Committee on the Judiciary 

United Statesi House of Representatives 

Washington, DC 20515 

Dear Chairman Smith: 

On behalf of the International Association of Chiefs of Police (lACP), 1 am writing you to voice our 
strong opposition to H.R, 2168, the Geolocational Privacy and Surveillance (GPS) Act. The 
provisions of H.R, 2168, as they relate to law enforcement's access rules when requesting a search 
warrant, would severely hinder our ability to properly serve the communities we are sworn to 
protect 

Requests for search warrants cannot adopt a "one size fits all" approach and must be evaluated on a 
case by case basis before a decision is made for the need to establish the level of probable cause. 
Access to fundamental data is a crucial law enforcement investigative tool and creates leads that 
could be used to bring focus on a specific individual who may be involved in criminal activity while 
eliminating persons who, while originally thought to be involved, are not. Without this basic 
information law enforcement would never be able to establish the probable cause and trace a 
criminal’s "electronic footprint." Law enforcement's goal is to attain justice while avoiding wrongful 
arrests and convictions. 


Thank you for your attention to this matter. 
Respectfully, 






Walter A. McNeil 
President 
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Can You See Me Now?: 

Toward Reasonable Standards for Law 
Enforcement Access to Location Data 
That Congress Could Enact 

Stephanie K. Pe/l^ itP Christopher SoghoiarP 


ABSTRACT 

The use of location iiifonnatioii by law enforcement agencies is common and becoming 
more so as technological improvements enable collection of more accurate and precise 
location data. Tlie legal mystery" siitTounding the proper law enforcement access standard for 
prospective location data remains unsolved. This mysteiy, along with conflicting rulings over 
tlie appropriate law enforcement access standards for both prospective and historical location 
data, has created a messy, inconsistent legal landscape where even judges in the same district 
may require law enforcement to meet different standards to compel location data. As courts 
struggle with these intertwined technology, privacy, and legal issues, some judges are 
expressing concern over tlie scope of the hanns, from specific and personal to general and 
social, presented by unfettered government collection and use of location data and how to 
respond to those harms. Judges have sought to communicate the scope and gravity of these 
concerns through direct references to Orwelfs dystopia in 1984, as well as suggestive 
allusions to the “panoptic effect” observed by |eremy Bentham and his later interpreters, 
such as Michel Foucault. Some have gone on to suggest that privacy issues raised by law 
enforcement access to location data might be addrcssed more effectively by tlie legislature. 

This Article proposes a legislative model for law enforcement access standards and 
downstream privacy protections for location infomiation. Tltis proposal attempts to (1) 
articulate clear mles for courts to apply and law enforcement agents and industry to follow; 
and (2) strike a reasonable balance among the interests of law enforcement, privacy, and 
mdustiy with the ultimate goal of improvmg the position of all concerned when measured 
against the current state of tlie law. 
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I. INTRODUCTION 

Over several months in 2008, a gang of fwe men, described as the 
“Scarecrow Bandits” in media reports, committed or attempted twenty-one 
violent “taleeover-style” bank robberies in the Dallas area.' i'Bl agents 
investigating the case contacted cellular telephone companies and obtained 
phone number logs to determine which telephones had been near the banks 
around tlie time ot the heists. By searching these voluminous records, agents 
discovered that Dm phones had made calls near twelve of the robbed banks.* 


1. See Press Release, DepT o£ Justice, Federal Jury Convicts Scarecrow Bandits on 
Bank Robbep' and Firearm Offenses (Aug. 13, 2009), http://www.justice.gov/usao/txn/ 
PressRelOO/ scarecrow'_bandits_convict_pt.htnil, 

2. See Declan McCuUagh, Reds Push fur Tracking Cell Phones, CNET NEWS (Feb. 11, 
2010), http : //news. cue tcom/ 8301 -13578_3- 10451518- SS.litml. 
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Similarly, after two men robbed a Connecticut bank in July 2008, law 
enforcement agents obtained historical cell tower logs revealing 180 different 
phone numbers tliat had made or received calls near the bank at the time of 
die robbery. Although these logs led police to two brodiers, both ot whom 
were soon arrested, the police also obtained and retained location 
information associated with 178 innocent people who will never learn that 
their phone companies disclosed information to police.^ 

Law enforcement agencies — already using location infonnation in dicir 
investigations — are likely to increase their reliance on such intormation as 
technolog}' improves.'* This is tme of requests for all types of mobile device 
location data, whether historical or real-dme (prospective)," in conducting 
criminal investigations and locating fugitives. For example, primarily due to 
die use of location information, the average time needed for the U.S. 
Marshals Service to find a fugitive has dropped from forty-two days to only 
tv'o.*’ In recent congressional testimony, a senior Department of Justice 
(“DOJ”) official explained how' a homicide detective and his partner in 
Prince George’s County, Mar}dand, used “cell tower [locationj information” 
to pursue a man wanted for a triple murder, capturing him in only nine 
hours.’ Having this information “immediately accessible” allowed the 
marshals to deploy “available law enforcement resources [etfectively] . . . 
widiout placing ofticers, or the public, at undue risk.”® Clearly, location 
information has become a powerful investigative tool in support of a range 
of law' enforcement responsibilities.^ 


3. See Dedan McCullagh, ACLU: FBI Used ‘Dragnel’-Slyk Warrmilless Cell Trackins^ 
CNET News (Jmie 22, 2010),‘littp://news.aiet.com/830i-31921_3-20008444-281.1itml. 

4. A more technical explanation of location infonnation is presented infra Part II, but 
for purposes of tins example, location information means infonnation about or derived from 
a portable, device, such as a cellular phone, that reveals the location of the device either 
approximately or with a high degree of precision. 

5. McCullagh, supra note 2 ('‘Obtaining location details is now 'commonplace/ says A1 
Gidari, a partner in the Seattle offices of Perkins Coic who represents wireless carriers.”). 

6. See Goin^ Dark: Lan ful Eleclronic Sun>eilLance in lije Dace of Nesr Technolujfes: Heann^^ 
Before the Suheomm. on Crime, Denwism ami Homeland Security of the H. Comm, on the Judkiaiy, 
112tli Cong. 2 (2011) (statement of Dr. Susan Landau), available littp://iudiciary.house. 
gov/hearings/pdf/Landau02172011.pdf. 

7. 'i he hlectronic Communications Privacy Act: Government Perspectms on Protecting Privacy in 
the Digital Hge: Hearing before the L Comm, on the Judiciary^ 112th Cong. 5 (2011) [hereinafter 
Senate fudiciary 2011 ECPA Hearing (statement of James A. Baker, Assoc. Deputy Attorney 
Gen., U.S. Dep’t of justice), available i7/‘http://l.usa.gpv/IsojNy. 

8. Id. ^ 

9. See Michael Isikoff, The Snilcb in Your Pocket, NEWSWEEK (Feb. 18, 2010), http:// 
w\vw.newsweek.com/2010/ 02/18/ tiie-snitch in your pocket.html. 
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The tool proved so effective tliat the number of “requests”^ to earners 
for location information grew “exponentially” over the past few years, with 
major wireless carriers now receiving thousands of requests per montli.“ 
Sprint Nextel received so many requests tliat it developed a web interface 
tliat gave law enforcement direct access to its subscribers’ location datad* 
Taw enforcement agents used the website to “ping” Sprint subscribers over 
eight million times in a single yeard^ 

Law enforcemenfs increased use of location information has spurred 
courts to scrutinize more closely government applications to compel third 
parties to disclose location data, as certain magistrate judges question and 
examine what legal standards govern law enforcement access to historical 
and prospective location information. Prosecutors “were using the cell phone 
as a surreptitious tracking device,” Judge Smith, a federal magistrate in 
Houston, told a reporter from Newsweek. “I started asking the LhS. 
Attorney’s Office, W'hat is the legal authority for this? WTiat is the legal 
standard for getting this information?”^'* 

All law enforcement demands (not involving voluntary emergency 
disclosures) for location information, whetlier seeking historical or 
prospective data, require some type of court order authorizing a compelled 
disclosure.*^ Determining the proper access standard — whether the higher 
“probable cause” standard, the lower 18 U.S.C. § 2703(d) order requiring 
“specitic and articulable facts” tliat the information sought is “relevant and 


10. The use of the word “requests” in this context means both compelled disclosures 
of location information where law enforcement presents a third-party provider with a 
probable cause w^arrant or an 18 U.S.C. § 2703(d) order and voluntary emergency disclosures 
pursuant to 18 U.S.C. § 2702, wdiere providers may voluntarily share infomiatiou with law' 
enforcement in die case of an emergency involving danger of deadi or serious physical injup' 
to any person. 

11. Isikoff, supra note 9 (“Albert Clidari, a telecommunications law'yer who represents 
several wireless providers, fells NEWSWEEK that the companies are now getting 
‘thousands of these requests per month," and the amount has grown ‘exponentially’ over the 
past few years.”). 

12. Chief Judge Kozinski, in a dissent in which he stressed the importance of 
maintaining Fourth Amendment protections in the face of increasingly sophisticated fonns 
of government surveillance, noted tliat “[wjhen requests for cell phone location information 
have become so numerous diat the telephone company must develop a self-service w'ebsite 
so that law enforcement agents can retrieve user data from the comfort of their desks, we 
can safely say diat ‘such dragnet-type law' enforcement practices’ are already in use.” United 
States V. Pineda-Moreno, 617 F.3d 1120, 1126 (9th Cir. 2010) (Kozinski, J., dissenting from 
denial of rehearing cn banc). 

13. Wat 1125. 

14. See Isikoff, supra note 9. 

15. ihr discussion htyvSecdons III.A and III.D. 
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material to an ongoing criminal investigation,”*'’ or some other “hybrid” 
standard — is anything but clear under current law. As various courts struggle 
to apply the Electronic Communications Privacy Act (“ECPA”)** and the 
Fourtli Amendment to compelled disclosures of location information, a 
messy, inconsistent legal landscape has emerged: “within the same judicial 
district, y^ou might have mm magistrates who disagree and issue contrary' 
orders for the standard upon which to disclose that [location] information.”*® 
Indeed, tire degree of confusion over the appropnate standard to apply to 
location information is increasing and has spread across judicial districts.* 

The House Judiciary Committee’s Subcommittee on the Constitution, 
Civil Rights, and Civil Liberties began to respond to this landscape of 
uncertainty in 2010 by holding a scries of ECPA reform hearings, one of 
which focused specifically on location information.''' Prior to the hearings, a 


16. 18 U..S.(:. § 270.'’)(d) (2010). 

17. Pub. L. No. 99-.b08, 100 .Star. 1848 (1986) (codified as amended in scattered 
sections o£ 18 U.S.C.). 'I'Jiis Article uses the term KCPA to describe the first three titles o£ 
tlie Electronic Communications Privacy Act: Title I (“Interception o£ Communications and 
Related Alattcrs”), 100 Stat. at 1848, which amended the Wiretap Aet (commonly re£erring 
to Title III (‘Wiretapping and Electronic Sur\^eillance”) o£ the Omnibus Crime Control and 
Safe Streets Act of 1968, Pub. L. No. 90-351, tit. Ill, 82 Stat. 197, 211-25 (codified as 
amended at 18 U.S.C. §§ 2511—2520 (2010))); Title II (“Stored Wire and Electronic 
( Nmmunications and Transactional Records Access”), commonly referred to as the Stored 
Communications Act (SCA), Pub. L. No, 99-508, tit. II, 100 Stat. 1848, 1860-1868 (codified 
as amended at 18 U.S.C. §§ 2701-2712 (2010)); and Title 111 (“Pen Registers and 'I'rap and 
Trace Devices”), comraonlv referred to as the Pen/Trap Devices statute, Pub. L. No. 99- 
508, tit. Ill, 100 Stat. 1848, 1868-1873 (codified as amended at 18 U.S.C. §§ 3121-3127 
( 2010 )). 

18. Electronic Comtnunications Vnvag Act Refom/: Heanng Before the Subcomm. on the 
Constitution, CimCRights, andCiml liberties of the H. Comm, on the Judidarg^ 111 th Cong. 26 (2010) 
[hereinafter I louse judi-dary 2010 HCPA Reform lleann^ (written statement of Albert Clidari, 
Perkins (ioie LLP), available http://iudiciaiy.liouse.gov/lieanngs/piinters/lllth/lll-98_ 
56271.pdf. 

19. See generally ECPrl Refom and the devolution in Location Based Technologies and Services: 
Hearing Be/m IheSuhcomm. on the Conslzlulion, Ciiil Bights, and Civil Eiberhes of the H. Comm, on the 
Judiciary, 111th Cong. 81—85, 93—94 (2010), [hereinafter Location Hearing (written statement 
of Judge Stephen Win. Smith, U.S. Magistrate Judge), available ^ 2 ?^ http://judiciary.house.gov/ 
hearings /printers /1 1 1 di/1 ll-109_57082.pdf (suiiimarizing and collec ting inconsis tent 
decisions). 

20. See Location Hearing, supra note 19. 'Phe overarciimg goal of tins heanng was to 
educate Subcommittee Members about how location-based technologies and services work, 
and how ECPA’s application to location information was creating a state of legal chaos for 
Magistrate Judges, as well as industr}^, privacy, and law enforcement stakeholders. In his 
opening statement at the Location Hearing, Siibeommittee Chairman Jerrold Nadler 
remarked tliat: 

any legislative changes to ECPA must . . . sustain tlie public’s confidence 
ill the securiy of tlieir communications or it [could] harm both tlie robust 
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number of companies and civil liberties groups joined together to create the 
Digital Due Process (“DDP”) Coalition in order to propose principles to 
guide congressional consideration of ECPA refonn."^ One principle 
proposed a new standard for law entorcement access to all types of location 
information, stating that “[t|he Government should obtain a search warrant 
based on probable cause before it can track, prospectively or retrospectively, 
the location of a cell phone or other mobile communications device.”"" This 
principle seeks to treat historical and prospective location information 
equally under the law and to require law enforcement to meet a probable 
cause standard before obtaining access to any location data. 

Unfortunatel)' for the privac)' community, DDP’s probable cause 
standard is a “non-starter” for law enforcement. One senior DOJ official 
recently told a Senate Committee diat “if an amendment [to the KCPAJ were 
to unduly restrict the ability of law enforcement to quickly and efficiently 
determine the general location of a terrorist, kidnapper, child predator, 
computer hacker, or other dangerous criminal, it would have a very real and 
very human cost.”^^ The Department of Justice will indeed resist die 
imposition of a high, unitar}' standard for location data access and will likely 
find no shortage of allies in Congress itself to do so effectively. Even the 


market for cell phones and the rapid innovation that is fundamental to the 
market’s health. Because E(]PA inevitably involves the interaction of all 
these important and complex considerations, we are taking the time 
through multiple hearings to educate ourselves carefully and fully before 
engaging in legislative action. 

We are honored to have certain witnesses here today, who are experts 
m tliese technologies. They can give us die necessary background to 
embark upon an understanding of how they work, what types of 
information and records they can generate and store, and how they can be 
of assistance to law enforcement in appropriate circumstances. 

This initial educational effort is in my view not only warranted, but 
essential before wc undertake any effort at amending or otherwise 
reforming ECPA. After we hear the terrain described, we will move on to 
other questions today — ^namely, how is ECPA currently being apphed to 
tliese location based technologies and services by tlie courts? 

Id. at 5—6. 

21. See About the Issue, DIGITAL DUE PROCESS COALITION (May 5, 2010), http://www. 
digitaldueprocess.org/index.c£ui?objectid=37940370-2551-llDF-8E02000C296BA163; see dso 
House judidafy 2010 tiCPA Reform Hearing suprasioXt 18, at 12 (written statement ofjames X. 
Dempsey, Vice President for Pub. Pohey, Ctr. for Democracy 'lech.), available d/http:// 
judiciaiy.house.gov/hearings /pdf/Dempseyl00505.pdf 

22. See Our Ptindples, Digital Due Process Coalition (May 5, 2010), http:/ /wvywv 
digitalducproccss.org/indcx.cfin?objcctid=99629E40-2551-llDF-8E02000C296BA163. 

23. Senate ]udidaij 201 1 ECPA Hearing, supra note 7, at 5 (statement of Tames A. Baker, 
Assoc. Deputy” Attorney” Gen., U.S. Dep’t of Jus dee). 
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DDP Coalition acknowledges tliat ECPA reform must “preserve the 
‘building blocks’ of criminal investigations.”^* Tn other words, any 
amendments to die ECPA must continue to enable an investigative system 
diat allows law enforcement to compel die disclosure of various types of 
non-content information under lower legal standards at the early stages of an 
investigation. Applying these less stringent standards to non-content 
information avoids the premature foreclosure of valid investigations, in that 
It allows agents to pursue early investigative leads and “build up” to the use 
of more intmsive tools to obtain more sensitive information protected by 
higher access standards, such as the contents of communications. 

But die difficulty with imposing a probable cause standard upon law 
enforcement access to all location data, as a matter of policy, does not 
minimize or negate die need for Congress to examine hov? law enforcement 
uses location information and to assess die privacy impact of current law 
enforcement access standards for location information. That examination 
will reveal an urgent need for Congress to amend the ECPA — both to clarify 
die law and reestablish the balance of interests among law enforcement, 
privacy, and industry equities.*' 

The unitaryr probable cause standard advocated by tlie privacy 
community and rejected by law enforcement has led to a stalemate. So, where 
do wc find ourselves? As co-autiiors who approach ECPA reform from very 
different backgrounds and perspectives, we recognize die need to propose 
law enforcement standards for location information that: (1) articulate clear 
rules for courts to apply and law enforcement agents and industry to follow; 
and (2) strike a reasonable balance among the interests of law enforcement, 


24. Id.; .see also Home judidcuy 2010 hCPA Kefim Hearing .supm note 18, at 16—17 
(written statement of James X. Dempsey). The DDP Coalition recognizes tliat: 

[ujnder current law, government investigators often work their way up the 
ladder to probable cause, starting with subpoenas for subscriber 
identifying information and stored transactional data, tlicn moving to 
court orders under 2703(d) for more detailed transactional data and court 
orders, based on less tlian probable cause, for real-time interception of 
signahiig and routing infomiation. Based on analysis of tliis and otlier 
data, they may have probable cause to obtain a search warrant. 

Id. 

25. Even tlie Department of Justice “applaudjs] [Senate Judiciary Committee] efforts 
to undertake a renewed examination of whether [ECiPA’s] current statutoiy 
sclieme . . . adequately protects privacy while at the same time fostering innovation and 
economic development.” See Senate Judicial' 201 1 ECPA Hearing, supra note 7, at 6 (testimony 
of Tames A. Baker). Mr. Baker further notes tliat “[i]t is legitimate to have a discussion about 
our present conceptions of privacy, about judicially-supervised tools the government needs 
to eonduet vital law enforcement and national security investigations, and how our statutes 
should accommodate bodi.” Id. 
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privacy, and industry such that they could be included in legislation that 
might be passed by Congress. Articulating such a reasonable proposal 
requires knowledge of technology, law, policy, and politics. 

For the purpose of offenng a reasonable legislative proposal, we assume 
as an incontestable value that law enforcement should have access to location 
information that is necessaipr and sufficient to ensure the safety of the public 
by apprehending criminal perpetrators and dismpting future criminal 
activity — but no more. W'c also assume as a second and equally 
uncontestable value tliat people should be, and know they are, tree from any 
government scrutiny of their location data that is not necessary to that public 
safety function. Neither of these values is an absolute one. As such, our 
proposal is neither the most “privacy protective” standard possible, nor the 
most “law enforcement friendly” standard imaginable. Indeed, what we offer 
in Part VI is the product of a dialogue betv^een the authors: one a committed 
privacy advocate and technologist, the other a former federal prosecutor who 
has both used location tools in that role and considered them from a 
legislative perspective while working for the House Judiciary? Committee. 

We believe tliis ^Article will advance the debate by proposing a policy 
framework, including model access standards that will be palatable to all 
stakeholders insofar as each of their positions will be improved in some 
appreciable way. Part 11 of this Article provides a brief background 
discussion of various current location technologies and the level of location 
precision they offer. Part III explores the confusion currently plaguing courts 
over law enforcement access standards to location data and examines ivhat 
those standards require the government to show. Part IV discusses some 
“lessons learned” from congressional hearings and adv'ocacy? efforts during 
the 111th Congress, specifically? informed by Stephanie’s work on the House 
Judiciary? ECPA reform hearings. Part V examines how courts considering 
law enforcement access to global positioning system (“GPS”) location 
information have articulated pnvacy impacts and other social hamrs using the 
interpreth?e frames of Orwell’s dystopia in 1 984, as well as what has come to 
lie called the “panoptic effect” — the anxious response produced by? the 
presumed omnipresence of tlie government’s gaze. Part V ultimately suggests 
that location privaq? is best addressed by die legislative branch. Finally, Part 
A^I presents a model legislative prn?acy framework for location information, 
including law enforcement access standards and other types of 
“downstream” privacy protections to ensure that, among odier things, law 
enforcement agencies do not retain location data longer dian needed for 
legitimate law enforcement purposes. 
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II. TECHNOLOGY 

Over the past few decades, the mobile phone has evolved from a luxury 
status symbol to a necessity. By the end of 2010, more dian ninettr-tive 
percent of the U.S. population subscribed to a mobile telephone sendee."’’ As 
consumers have embraced cellular phones, law enforcement agencies have 
gained access to several methods dirough which to obtain both histoncal and 
real-time (prospective) location information. Generally speaking, this 
information can be separated into two categories: passive collection of 
information incident to the delivery of cellular services, and active 
sunreillance in which information is collected and processed solely to benefit 
law enforcement agencies. In addition to this distinction, tiiere are several 
different technologies that can be used to obtain location information — 
some highly accurate, odiers much less so, but with the general direction of 
innovation tending towards greater precision. The puqaosc of this Part is to 
provide die reader with a brief introduction to each of tiiese technologies and 
tlae ways in which tliey can be used to determine or track tlie location of 
individuals. 

A. A Brief Introductiox to Cell Phone 'Pechnology 

Unlike conventional “wireline” phones, mobile phones use radio to 
communicate between the customer’s telephone and the carrier’s network. 
Service providers maintain large numbers of radio base stations (also called 
“cell sites”) spread throughout their geographic coverage areas.’’' These cell 
sites are generally^ located on “cell towers” sendng geographic areas of 
varying sizes, depending upon topography and population concentration. 
Service providers are deploying higher-capacity network architectures, with 
the potential to provide more precise information regarding a phone user’s 
location. 

As part of their normal function, mobile phones periodically identify 
themselves to the nearest cell site as they move about the coverage area.’^* 


26. Wireless Qiack Fac/s, CTIA — ^VClRELESS Ass’k (2011), http:/ /www.ctia.otf;/ advocacy/ 
researcli/iiidex.cfiu/ aid/ 10,323. 

27. Press Release, Infomia Telecoms & Media, The Shape of Mohde Networks Starts 
To Change as Femtocells Ouhiiimber MacroceUs in US (Oct 21, 2010), http:/ / femtofoinm. 
otg/fema/pressreleases.php?id=269 (“[FJemtocells now oumumber conventional outdoor 
cell sites in the United States marking a major milestone in the evolution of mobile 
networks. Conservative estimates suggest there are currently 3.30,000 femtocells and around 
256,000 macrocclls in the US. Furthermore by March 2011, there arc expected to be at least 
tvdcc as many femtocells as macroeells in the US.”). 

28. Fucaliun Hearins^ supra note 19, at 13 (testimony of Prof. Matt Blaze, Univ. of Pa.) 
(“Cell phones, as diey^ move and as they are turned on, discover die base station widi the 
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This enables wireless earners to know how to reach a particular subscriber’s 
phone when it receives a call. Of course, mobile telephones (as their name 
suggests) arc portable, and so when a phone moves away from die cell site 
\vitli which It started a call and nearer to a different cell site, tlie call is 
“handed over” from one cell site to another without interruption.*'' 

Each cell site has a large but fixed maximum capacit)^ tliat can transmit a 
limited number of concurrent calls and data streams. Tn an area with a low 
number of users (or users who make few calls and who arc not heavy users 
ot data services), only a few^ cell sites will be necessary, and each can serve a 
large geographical area. In areas with large numbers of active users, however, 
and particularly those wiho make heavy' use of data sendees, a carrier wall 
need to place far more cell sites, each serving a smaller geographic area, to 
compensate for the relatively larger usage burden placed on die local 
netv'ork.'’° Carriers diat do not or cannot deploy more cell sites to cope with 
increased demand suffer from slow data speeds and frequent dropped calls.’’ 
As such, mral areas tend to have fewer cell sites, each with greater service 
areas, than urban areas, which generally have far more sites that are spaced 
closer together. Obviously, the proximity of one cell site to another in a 
geographic area is one factor in the production of more accurate location data. 


strongest radio sigiTal and perform a registration process identifying -dTemselves, establishing 
tliat die user has a valid cell phone service, and identifying the local base station that is best 
equipped to process the call by virtue of the strength of its radio signal/’); see aho id. at 20 
(written statement of Prof. Matt Blaze). 

29. Id. See general!) Nisliith D. liipathi, Jeffrey H. Reed & Hugh h. YanLandingliam, 

Handoff in Cellular Sjstems^ lEKE Pers. Comm., Dec. 1998, at 26, available /www.scss. 

tcd.ie/Hitesh.Tewaii/ papers/ tiipathi98.pdf 

30. Ijjcaiion Heanng, supra note 19, at 15 (testimony of Prof Matt Blaze) /‘[T]oday the 
liinitiiig factor in how far apart [cell sites] can be is the number of customers tliey have to 
serve. And as tliis technology has exploded, tlie number of customers in any given area has 
gone explosively up, particularly in urban and densely populated areas.”). 

31. For example, one carrier has a reputation for dropped calls in some urban areas like 
San Francisco, due to the presence of large numbers of tecli-sa\^y users with data-liungiy 
iPhones, combined with the three-year waiting time required by the local authorities to get 
permission to erect new cell towers (which is often combined with further local 
obstructionism, whether motivated by opportunistic financial holdups or by NIMBY 
reactions to cell tower construction from individuals and cominmiities witli valuable real 
estate holdings). See Edward Wyatt, ATPCT and T-Mobile Chiefs Field Skeptical Questions on 
CapitolHilk N.Y. Times (May 11, 2011), http://www.nytiines.com/2011/05/12/technology/ 
12plione.html /T-Mobile ads made merciless fun of AT&T’s reputation for dropped calls 
and slu^sli wireless data connections”); MG Siegler, Steve Jobs Continues To Answer the 
Questions That AT&T Won't Techcrunch (July 18, 2010), http://techcrunch.eom/2010/ 
07/18/stcvc-jobs-att-2/ (“[Apple CEO Steve Jobs] said tliat it takes [AT&T] three years to 
get approval for a new cell tower in San Francisco. Yes, tlirce years. ‘FhaPs the single bi^esl 
problem they’re baiingl Jobs said. . . . Jobs also noted at the press conference that it takes ‘about 
three weeks’ to add a new cell tower hi Texas.’;. 
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B. Cell Site Data 

Wireless serviee providers retain detailed logs for diagnostic, billing, and 
other purposes. These logs reveal the calls and Internet connections made 
and received by wireless subscribers, as well as detailed technical information 
regarding the cell sites that were used.^"' Such logs generally only reveal which 
particular cell site a phone was near at the time of die call. 

Data from multiple towers can he combined to pinpoint (or 
“triangulate”) a phone’s latitude and longitude with a high degree of accuracy 
(typically under fifty meters).’’ This triangulated cell site data is generally only 
available prospectively, either due to a 911 call by a subscriber, or because a 
law enforcement agency has asked a carrier to collect it. Some carriers do 
routinely track and record triangulated data, and movement toward this 
practice is a general trend in tlie industry, although it is not yet the dominant 
practice, much less the common policy of all companies.^’ As such, law 
enforcement agencies can also obtain high-accuracy, triangulated historical 
data when it is available due to a specific company’s data collection practices. 

C. Gi,obai, Positioning System (“GPS”) 

Many mobile phones now include special hardware that enables the 
device to receive signals from a constellation of global position satellites.'"”’ 
Software on the phone can use these signals to calculate latitude and longitude. 


32. McCullagh, supra note 2 (“Cellular providers tend not to retain moment- by- 
moment logs of when each mobile device contacts the tower, in part because there’s no 
business reason to store tlie data, and in part because tlie storage costs would be prohibitive. 
Tliey do, however, keep records of what tower is in use when a call is initiated or 
answered . . . .”); see also COMPUTER CRIME & INTELLECTUAL PROP. SECTION, DEP’T OF 
Ti.si ICK, Rk'i'kn'i'ion Periods oh Major Ckij jji.ar Service Providers (2010), availabk at 
httph/uAmv. wired. coiTi/irnages_blogs/threatlev-eI/201 1 /09/rete.ntionpolicy.pdf (listing, in 
chart form, data retention periods by the major cellphone carriers). 

33. This requires the placement of special radio equipment at each cell site. See generally 
Ijication Hearing, supra note 19, at 38-41 (statement of Michael Amarosa, Sr. Alee President 
for Public Affairs, TruePosition Inc.). 

.34. Hocation Hearing, supra note 19, at 26—27 (written statement of Prof Matt BlaLe) 
(“(XXdietlier locations are routinelv tracked and recorded at times otlier tliaii when calls are 
made or received depends on the poUcy of die pardcular earner.) . . . Some carriers also store 
frequently updated, liighly precise, location information not just when calls are made or 
received, but about ev-ery devhee as it moves about the networks. Maintaining such detailed 
records about tlie locations of phones as they move from place to place makes good 
engineering sense, and wx should expect this trend to continue as part of the natural 
progression of technology.’). 

35. This communication is one-way. Phones receive signals from the satellites but do 
not transmit anytlimg back to diem. 
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often witli a high degree of accuracy (less than twenty-five meters)/’'* 
Although GPS is often more accurate than any other location technology, 
there arc a few limitations: GPS signals arc weak, high-frequency signals that 
do not penetrate walls, and as a result GPS often does not work when 
indoors. Moreover, for the same reason, GPS often does not function w^ell in 
“urban canyons” due to signal deflection off of the sides of tall buildings. 
Furthermore, the GPS functionality tends to use significant amounts of 
power, wdiich can lead to shorter battery life.^’ Wlien GPS functionality is 
available, wireless carriers can prospectively obtain a device’s location, such 
as when the user dials 911, or when asked to do so by law" enforcement 
agencies. Carriers do not generally have historical GPS data to deliver. 

Many smartphones now provide access to the GPS functionality to third- 
party “apps” installed on the devices. As such, app developers and location 
service providers also have access to users’ GPS location data, often far more 
than tlie w"ireless carriers, although this is usually with the user’s knowledge 
and consent.^® Law enforcement agencies can compel these location service 
providers to disclose the historical GPS data in their possession, although 
prospective disclosures are limited to user-initiated “check-ins,” as these 
companies are usually not able to generate their own GPS queries. 

D. WiFl 

Many smartphones include w"ireless internet (“WiFi”) functionality, 
enabling device owners to browse tlic web at much faster speeds (and 
watliout impacting their carrier-imposed data cap) when at home, work, or in 
many public places. In addition to providing a connection to the Internet, the 
WiFi connections can also be used to determine the approximate location of 
the device. 


36. location Hearing, supra note 19, at 55 (attachment to written statement of Vlichael 
Amai'osa). 

37. Letter from Midy Lees, President, Mobile Cominc’ns Bus., Microsoft Corp., to 

Rep. Fred Upton et al. (May 9, 2011), anailahk a/ http:/ /blogs.technet.com/cfs-file.aslix/ key/ 

communityserver-blogs-components-\veblogliles/00-00-00-82-95/2451. Consumer- Privacy- 
_2600_-Wiadows-Phone-7-_2D00_Submission-to-House-Elnerg}"-and-Commerce-Committee- 
_2D00_-5.9. 2011. pdf (“Windows Phone 7 generally relies upon WiFi access point or cell 
tower information to determine a phone’s approximate location because GPS location data 
IS not always available, and when it is, it can draw more heavily on battery power 

38. If a user “checks in” with a location provider like Foursquare, tliat location 
provider will learn their location, but the wireless carrier will not, as tire information is sent 
directly" to the location provider. 
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Several companies have created databases listing wireless networks and 
their approximate geographic location/' Initially, these databases were 
populated with data obtained by driving dirough the streets of eities around 
die world, collecting tiie data witli a laptop or otiier special hardw^are/'' In 
recent years, however, Google, Apple, and Microsoft have all enlisted the 
“crowdsourced” assistance of millions of smartphones to collect this data for 
them/^ 

By dctcmiining the available WiFi netu'orks and submitting tins list to 
one of tile database providers, applications on the device and the platform 
mobile vendor (e.g., Google, Apple) can quickly determine the user’s 
approximate location without using GPS, which would consume significant!}^ 
more battery power/^ Location data is increasingly valuable, enough so that 
tile major platform vendors have been “willing to push tiie envelope on 
privacy to collect it.” ' Not only is location data used for maps and 


39. See Greg Stirling. Google Ends Street Vleir WiFi Datn Collection, May Now Need Other 
Sources for Lneation^ SEARCH ENGINE Land (Oct. 20, 2010), hftp://searchengiiieland.coni/ 
google-ends-street-view-wifi-data-conection-poteiitially-needs-otlier-sources-for-location-53373 
(“One of the purposes of collecting WiFi locations is to enable Google to identify user 
location (on handsets, laptops and PCs to some degree) through tiiangulation using a 
database of hotspots.”); see also Frequently Asked Oueslions^ SKYHOOK WIRELESS, 
http;//www.skyhookuareless.com/howitworks/fac|.php (last Asited Mar. 17, 2012) (“Skyhook 
deploys vehicle-based signal scanning and data collection technologies, a connnon practice in 
the digital mapping and data collection industries. These Skyhook-equipped vehicles conduct 
s}Ntematic and comprehensive signal surveys by traveling eveiy^ public road and highway in 
targeted coverage areas, lliese signal surveys capture the data output of individual access 
points and pair them with a date, time, and location stamp at the point where they are 
received by die data collection device.’"). 

40. See Brad Stone, Google Says It Collected Vnvate Data by Mistake, N.Y. TlYIES (May 
14, 2010), http://www.nytimes.eom/2010/05/15/business/15google.html (“[BJecause of a 
programming error in 2006, tlie company had . . . been mistakenly collecting snippets of data 
that happened to be transmitted over non-password protected wi-fi networks that the 
Google camera cars were passing.”); see also jenna Wortham, GelJphone ] mator System Needs No 
Satellite, N.Y. TIMES (May 31, 2009), arailahte at http://www.nytimes.eom/2009/06/01/ 
technolog}bstart-ups/011ocate.html (explaining how^ the company Skyhook “uses the chaotic 
patchwork of the world’s wi-fi networks, as well as cell towxrs, as the basis for a location 
lookup service”). 

41. Julia Angwin & Jemiifei Valentino-Devries, Apple, Google Collect User Data, WALL 
St. |. (Apr. 22, 2011), http:/ /on.wsi.coni/zp2Euo (“Apple Inc.’s iPhones and Google Inc.’s 
Android smartphones regularly transmit tlieir locations back to Apple and Google, 
respectively ... as part of their race to build massive databases capable of pinpointing 
people’s locations via their cell phones.”). 

42. See generally John Morns, Apple Trades Vrivag for Battery Life, Instead of Protecting Both, 
Center for Democracy & Tech. (Apr. 22, 2011), https://www.cdt.org/blogs/john- 
morris/applc-trades-privacy-battery-life-instead-protecting-both. 

43. Miguel Helft, Apple and Google Use Phone Data To Map the World, N.Y. TIMES (Apr. 
25, 2011), https:/ /wAVWMiytimes.com/2011/04/26/teclmology/261ocate.htnil. 
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navigation services on mobile devices, but it is also used to customize 
advertising aimed at people in a particular place. Such ads are far more 
lucrative tliaii otlicr ads and arc becoming a major portion of tlic mobile 
advertising market, which industr)" experts estimate will be a |2.5 billion 
market by 2015.'''' Not only do these economic factors encourage companies 
to collect more location data, but they also encourage the collection of data 
with greater accuracy, allowing merchants to pitch advertisements to 
consumers walking past their store, ratlier than just diose in die neighborhood. 

R. PiNG.S 

Most of die location intormation described in this Part is collected in the 
process of providing wireless voice and data services, or due to users calling 
91 1 or using a location-enabled app on their smartphones. For such 
information, law enforcement agencies can either request historical data 
already stored by die provider, or request prospective surveillance tiiat will 
provide data to the law enforcement agency as soon as die carrier receives it. 
In either case, the information collection is passive, in that no new data is 
generated due to the law enforcement surveillance request. 

It IS also possible, however, for carriers to monitor their customers 
actively, generating new* data specifically in response to a request from law 
enforcement agencies. In such scenarios, the wireless carriers can covertly 
“ping” a subscriber’s phone in order to locate them when a call is not being 
made. Such pings can merely reveal the nearest cell site to the subscriber,''^ or 
more accurate GPS or tnangulated data if requested.'^® In addition to the 


44. Id. 

45. Sec Stone v. State, 941 A.2d 1238, 1244 (Md. Ct. Spec. App. 2008) (“Trooper 
BacliteU obtained die appellant’s cell phone number and contacted his cell phone service 
provider. At Trooper Bachtell’s request, the service provider conducted a ‘ping’ of the 
appellant’s cell phone, which revealed that the phone was ‘within a two mile radius of the 
Frederick (iomity Detention Cienter.’ ”). 

46. See Comments of CTIA — ^The Wireless Association on U.S. Department of Justice 
Petition for Expedited Rulemaking at 17, I/i re Petition for Expedited Rulemaking To 
Establish Technical Requirements and Standards Pursuant to Section 107(b) of the 
Communications Assistance for Law Enforcemenet Act, Docket No. RM-11376 (Fed. 
Commc’ns Comm’n July 25, 2007), amilable a/ http:/ /fjallfoss.fcc.gpv/ecfs/comment/viewPid^ 
5514711157 (“Law enforcement routinely now requests carriers to continuously ‘ping’ 
wireless devices of suspects to locate them when a call is not being made ... so law 
enforcement can triangulate the precise location of a device and [seek] the location of all 
assoaates communicating with a target.”); see also Devega v. State, 689 S.E.2d 293, 299 (Ga. 
2010) (“JTJhc investigators requested that Devega’s cell phone provider ‘ping’ Ins phone, 
which the officers described as sending a signal to the phone to locate it by its global 
positioning system (GPS). The company complied and informed the police that tlie phone 
vv^as moving north on Cobb Parkwayv”)i. 
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carrier-initiated pings, law enforcement agencies have also performed “low 
tech” pings by calling a target and hanging up before the phone rang, in 
order to generate cell site data tliat could then be requested from the earners.'*' 

E. Trends 

The increasing accuracy and use of location data is motivated by the 
proliferation and advancement of mobile technology, as well as the lucrative 
commercial market for location-based sennees and marketing. Within that 
general context, there are several trends worth noting that suggest that single 
cell site data will become increasingly accurate. This postulation is particularly 
significant for evaluating current DOJ policies governing die legal standards 
for law enforcement’s compelled disclosures of prospective location 
information.'** 

First, in an attempt to “fill the gaps” in their coverage, wireless carriers 
have, in tlie past few years, distributed hundreds of tliousands of 
“microcells,” “picocells,” and “femtocells” to customers, which connect to 
the user’s broadband internet connection and provide cellular connectivity to 
phones within tens or hundreds of meters. Industry estimates indicate that 
there arc already more than 3,30,000 femtocells deployed in the United States, 
as compared to the more than 250,000 traditional carrier cell sites.'*'* As these 
devices often broadcast a signal no further than a subscriber’s home, the 
accuracy of single cell site location data can in some cases be more accurate 
than GPS, depending on whether the target is connected to a traditional cell 
site, or a residential femtocell. 

Second, the success of Apple’s iPhone and other smartphones has led to 
a massive Increase in the use of data by mobile users. For example, AT&T 
has seen an 8,000 percent increase in data traffic betv^een 2007 and 2010.^'* In 
response to tliis increased demand on their networks, carriers are deploying 
new cell sites and reducing the coverage area of existing towers.** As carriers 


47. United States v. Forest, 355 F.3d 942, 947 (6th Cir. 2004) (“In order to reestabHsh 
visual contact, a DEA agent dialed Gamer’s cellular phone (uathout allowing it to ring) 
several times that day and used Sprint’s computer data to determine which cellular 
transmission towers w'ere being ‘hit’ by Gamer’s phone. This ‘cell site data’ revealed the 
general location of Gamer.”)i. 

48. See infra Section III.A.1. 

49. Press Release, Informa Telecoms & Media, supra note 27. 

50. Dan Meyer, ATeirT Filing Provides Interesting Industr/ Data, RCR Wireless (Apr. 
25, 2011), http://www.rcrwireless.eom/aiticle/20110425/GARRIERS/110429949/att-filing- 
providcs-intcrcsting-industry'-data. 

51. Tracy Ford, Ponder Indusltj Pruned for Growth mth Comer Buildouts, RCR 
Wireless News (Mar. 3, 2010), http://www.rcru4reless.eom/ARTICLE/20100303/INFRA 
STRUCTURE/100309979/ tower indus try primed for-growdi whtli-carrier buildouts (“LTE 
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embrace faster 4G mobile data technologies, they will need even more cell 
sites, further reducing the coverage area around each tower. 

As the coverage area around each traditional cell tower shrinks, and 
consumers increasingly embrace fcmtocclls in their homes and businesses, 
single cell site data will become far more accurate — in some cases as good as 
GPS, and m others pinpointing someone’s location to an area the size of a 
few blocks. 

III. THE LAW 

This Article proposes a policy framework tliat balances the interests of 
stakeholders affected by law enforcement access standards for provider-held 
location information. Before turning to policy proposals, the Article first 
discusses how law enforcement currently justifies its collection of prospective 
and historical location data — botli under the DOJ’s current interpretation of 
tlie law^ and the suggested policy guidance it gives to prosecutors and agents 
in the field. 

This Part describes how the DOJ’s and courts’ various statutory^ 
interpretations have created a set of conflicting standards for law enforcement 
access to location data. Changes in technology, combined witli tlie instability 
in the law created by conflicting legal standards for location data, create a 
critical need for Congress to amend the law to produce a better balance 
among privacy^ law’ enforcement, and industry equities — a balance that 
would ideally benefit all stakeholders in some appreciable way. As such, this 
Part seeks to identify where that balance, as a matter of policy, may lie and 
how new^ law enforcement access standards or other “dowmstream” privacy 
protections might serve that legislative end. This Part therefore focuses on the 
policy implications of die current law, not on how^ the Fourth Amendment 
might apply to law enforcement access to location data held by a tiiird party. 
Wlien and under what circumstances the Fourth Amendment might require 
law’ enforcement to obtain a w’arrant to obtain location information from 
diird-party’ providers remains a contested area of the law^^ and one that is 


is going to be driving revenue for the tower companies ... as a result of the incredible demand 
supported by LTE 700 MHz spectrum and die resulting splitting and additional coverage 
and capacity’ dial die carriers are going to have to put in place to meet diat demand.”). 

52. Cotapam .Susan Freiwald, Cell Phone Location Data and the fourth Amendment: A 
Question of Lam, NotFact, 70 Md. L. Rev. 677, 717 (2011) (arguing that courts should require 
a tt’arrant for access to location data m all cases because such acquisition is a search under 
the Fourth Amendment), mith Onn S. Kerr, Court Rules That Police Cannot Use Warrants To 
Obtain Cell Phone Location of Person Who Is Subject of Arrest Warrant, VOLOKII CONSPIRACY 
(Aug. 8, 2011), http://volokh.eom/2011/08/08/court-rules-that-police-cannot-use-warrants- 
to-ob tain cell phone-location of person wlio-is-subject-of arrest warrant/ (arguing tiiat location 
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beyond tlie scope of this Article to reconcile. To tlie extent tliat tlie 
discussion touches upon Fourth Amendment issues, it does so in the service 
of describing and developing a policy discussion, not to offer an opinion on 
die correct application of the Fourth Amendment to location infonnation. 

A. I.RGAi, B ackground for Rrai.-Timk or “Pro.sprctivr,” 

Cell Site Data 

Locating the proper law enforcement access standard for prospective 
location data in the current law is, in some respects, like the quest for the 
Holy Grail, tiic search for tlie fountain of youtii, or the hunt for a truly 
comfortable pair of high heels — one is unlikely' to find them. This legal 
myrstery remains unsolved primarily for two reasons. First, tlie ECPA'"’'’ — the 
primary law governing law enforcement access to wire, oral, and electronic 
communications and other stored subscriber records and information — docs 
not contain tlie word “location” in any part of tlie statute or otlierwise 
provide language that could be easily interpreted to cover law enforcement 
access to real-time location data from third-party providers.'^'* Second, 
Congress, in a different statute, has only expressed what is insufficient, for 
purposes of law enforcement access to prospective location infomiation 
from a third-party provtider, but not what is either necessarj! or sufficient for 
such compelled disclosures. Indeed, the Communications Assistance for Law 
Enforcement Act (“CALEA”) merely instructs tliat “any information tiiat 
may disclose the physical location of [a telephone senticej subscriber” may 


infonnation of phones is not protected by the Fourth Amendment under Smith v. Maryland^ 
44211.8.735 (1979)). 

53. .'r^£'.f/-^r67iiote 17. 

54. Consider, for example, the testimony of Judge Smith describing the difficult)^ he 
and other Magistrate Judges have faced in determining the proper law enforcement access 
standard for real-time location information: 

Moreover, none of the otlier categories of electronic surveillance seemed 
to fit. ITie pen register standard was ruled out by a proviso in a 1994 
statute known as CALEA. The wiretap standard did not apply because 
CSI does not reveal the contents of a comniunication. The Stored 
Commiinicarions Act (SCA) standard did not seem to apply for two 
reasons: the definition of “electronic communication” specifically 
excludes information from a tracking device; and the structure of the SCA 
was inherently retrospective, allowing access to documents and records 
already created, as opposed to prospectAc real time monitoring. 

Locatm Hearing supra note 19, at 82-83 (footnotes omitted); sie also Kevin S. Bankston, Onty 
the DO] Ktms: The Secret Laiff of Tkctmnk Smveiilance, 41 U.S.F. L. Rev. 589, 606-09 (2007) 
(analyzing how the Wiretap Act and Pen/Trap statute do not provide the requisite authority 
for such “tracking” and the SCA only authorizes retrospective access to previously stored 
communications content and non content infonnation). 
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not be acquired “solely pursuant to the authority for pen registers and trap 
and trace devices. Therefore, with respect to a compelled disclosure, if 
real-time location data cannot be provided to law enforcement “solely 
pursuant” to a court order for a Pen/Trap device, tliere must be some further 
requirement. But tliat requirement, unfortunately, remains undefined in the 
law. This exercise in Via Vepatim^'^ makes for great scholastic discussions 
about the incomprehensible character of an ineffable God but it is not very 
effective as a descriptive tool for discerning a legal standard. At best, it is a 
rather ineffective inversion of Justice Stew^art’s famous concurrence in 
Jacohellis v. Ohio about the similar difficulty the Court encountered in defining 
“hard core pornography” with any accuraey: “I know it when I [don’t] see 
it.”^^ Stated more precisely, if less concisely and memorably, “Til know it 
when I can infer its existence and nature by seeing every^thing that it is not.” 

'/. The DOJI InLerprelalion of the Standard for Obtaining Trospective 
Cell Site Data 

Lacking clear, affirmative statutory guidance, the DOJ has routinely 
acquired, since at least 200.S, certain categories of “less precise” prospective 
cell site information through tlie combination^ of two court orders: ( 1 ) a 
Pen/Trap court order pursuant to 18 U.S.C. § 3123,® and (2) a “D” Order 
pursuant to 18 U.S.C. § 2703(d), a section of the Stored Communications Act 
(“SCA”) that permits tlie government to compel the production of non- 


55. 47 U.S.C. § 1002(a)(2) (2010). 

56. The “Via Negativa” is a method of philosophical and theological argument often 
associated witli mysticism, sometimes referred to as “negative” or “apophatic” tlieology that 
attempts to describe God or die divine good by negadon, specifically in terms of what God 
is not (apophasis)^ disceming instead only what may not be said accurately concerning the 
goodness and perfe.ction(s) of God, which are bey^ond direct expression. The technique has 
its roots in sey-eral Greek philosophical schools, as w'eU as several Western and Eastern 
religious traditions. See Negative Theohgp, The Blackwell Dictionary of Western 
Philosophy 465-66 (Nicholas Bunnin 8i Jiyaian Y'u cds., 2004); see also fCvREN 
Armstrong, The Case for God 317 (2009) (describing the potential resurgence of 
apophatic argument in postmodern tlieology). 

57. JacobelUs v. Ohio, 378 U.S. 184, 197 (1964) (Stewart,]., concurring). 

58. See Bankston, supra note 54, at 609—12 (describing die first pubHcally known case 
yydiere the D(i)| articulated the “hybrid theoiy” in applying for a court order authorizing 
access to real-time cell site information). 

59. 18 U.S.C. § 3123(a)(1) (directing that a court “shall enter an ex parte order 
authorizing the installation and use of a pen register or trap and trace device ... if the court 
finds that the attorney for the Government fin an application pursuant to 18 U.S.C. 
§ 3122(a)(1)] has certified to the court that the information likely to be obtained ... is 
relev-aiit to an ongoing criminal investigation”). 
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content records or information pertaining to a subscriber or customer.® 
Wlien combined, these t\^?o orders are known as a “hybrid order.”''^ A DOJ 
manual documents that the rationale behind the DOJ’s “hybrid” use of these 
twm statutes derives trom a combination ot discrete statutory requisites.® 
First, because “cell-site data is ‘dialing, routing, addressing or signaling 
information,’ ... 18 U.S.C. § 3121(a) requires the government to obtain a 
Pen/Trap order to acquire this type of information.”® Second, however, 
because CALKA “precludes die government from relying ‘solely’ on die 
audiority of die Pen/Trap statute to obtain cell-site data for a cell phone . . . 
some additional authority is required to obtain prospective cell-site 
information.”® The DOJ asserts that “[sjeetion 270.3(d) provides this 
audiority because ... it authorizes the government to use a court order to 
obtain all non-content information pertaining to a customer or subscriber of 
an electronic communications service for a remote computing sendee].”'’” 

The same DOJ manual, published in its third edition in 2009, also 
provides guidance about the “precision” of the information likely to be 
obtained from cell site data (exclusive of GPS location technologies), 'i'he 
manual instmets that “fcjell-site data identifies the antenna tower and, in 
some cases, the 120-degree face of the tower to which a cell phone is 
connected, botli at the beginning and the end ot each call made or received 
by a cell phone. ilie manual furdier explains that “ftjhe towers can be up 
to 10 or more miles apart in rural areas and may be up to a half-mile or more 


60. See id. § 2703(c) (authorizing law enforcement to compel “a provider of electronic 
communications sercrice or remote computing service to disclose a record or other 
information pertaining to a subscriber to or customer of such service (not including the 
contents of communications) only when die goveniment entity . . . obtahis a court order for 
disclosure under subsection (d) of tiiis section . . .”). 

61. U.S. Dkf’i' ok Jus'i'ick (DOJ), Skarchino and Ski'/ino Comkl'i'krs ano 
Ob'iainino b.i.Kca'ROMc; Evidknok in Criuinm. Invks'ikia'i ions 160 (3d ed. 2009) 
[liereinafter DOJ Manual], aieailahle ijt http://vAvw.justice.gov/crimmal/cybercrime/docs/ 
ssmanual2009.pdf 

62. Jd. at 159-60. Some published decisions also indicate that DOJ prosecutors have, at 
times, offered the AH Writs Act, ch. 646, § 1651, 62 Stat. 869, 944 (codified as amended at 28 
U.S.C. § 1651 (2010)), as a “mechanism for tiie judiciary to give [the govemnieiit] the 
hivestigative tools tliat Congress has not.” In re Application of tlie U.S. for an Order 
All tiiorizing tire Use of a Pen Register and a Trap and Trace Device {In re E.D.N.S'. 
Applicatiori), 396 F. Supp. 2d 294, 325 (E.D.N.Y 200.5); .ree aLwj In re Appheation of the U.S. for 
an Order Authorizing the Installation and Use of a Pen Register (In n W.D.N.Yi Applkatmi), 
415 F. Supp. 2d 211, 219 (AoD.N.Y 2006). These courts did not endorse this theory. 

63. DOJ Manual, supra note 61, at 159-60. 

64. Id. at 160. 

65. Id. 

66. Id. at 159. 
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apart even in urban areas. Relying on this description of cell tower 
technolog}', the manual concludes: “[A]t best, these data reveal the 
neighborhood in which a cell phone user is located at the time a call starts 
and at die dme it terminates; it does not provide continuous tracking and is 
not a virtual map of a cell phone user’s movements.”^''* 

This description of the relative precision of cell site data, even if it is 
intended only to apply to single cell tower data (i.e., no multi-tower, 
triangulation, or GPS location information), will soon be — if it is not 
already — outdated witii the deplo}iTient of microcell, picocell, and lemtocell 
technolog}' tiaat, in some cases, can be more accurate tiian CPS."^ Indeed, in 
urban areas and other environments where microcell technolog}' is present, a 
cell phone’s location can be identified on an individual floor or room within 
a buildingf” Moreover, the precision of single cell tower data will only 
increase as providers deploy new cell sites to cope witii the surge in mobile 
user data traffic. ' 

The DOJ manual further advises prosecutors that in most distncts they may 
obtain prospective cell site information with the use of hybrid orders, but it 
also acknowledges tliat some magistrate judges require a “probable cause” 
showing before authorizing law enforcement access to any type of 
prospective cell site data.’^ This split among magistrate judges, characterized by 
one federal prosecutor as the “Santa Ana Judicial Revolt,”’^ is discussed next. 

2. Judicial Resistance to the Government’s Use of Hybnd Orders 

A growing number of magistrate judges within and across various judicial 
districts have rejected the government’s use of die hybrid theory to obtain 
any type of prospective cell site information.^'* Some courts have held that, as 


67. td. (citing Jn re Application of the United States of .America for an Order for 
Disclosure, of Telecomm. Records and Authorizing the Use of a Pen Register and Trap and 
Trace (In re S.D.N.Y. Application), 40.5 F. Supp. 2d 435, 449 (S.D.N.Y. 2005)). 

68. Id. 

69. See Ljjcation Hearing, supra note 19, at 25 (written statement of Prof Matt Blaze, 
Univ. of Pa.). 

70. Id. 

71. Id. 

72. DO] Manual, supra aoie 61, at 159—60. 

73. E-mail from Tracy WUldson re: (lhanges to CiPS / Uell Site for Investigations 
Form (July 28, 2008) (informing other prosecutors about changes in office procedures for 
obtaining GPS and cell site information), in U.S. Dep’t of Justice, Response to Freedom of 
Information Act Request No. 07-4123 rc: Mobile Phone Tracking 13 (Sept. 8, 2008), available 
rtf littp://www'.aelu.org/pdfs/freespecch/ecllfoia_rclcase_074123_20080911.pd£ 

74. Ijjcaliun Hearing, supra note 19, at 81—85, 93—94 (testimony of Judge Stephen 
Wm. Smidi, U.S. Magistrate judge). Fed. R. Crim. P. 41(d)(1) directs that “after receiUng an 
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a matter of statutory constmction, die Pen/Trap order and die D Order 
cannot be used to obtain prospective cell site information, but that Rule 41 
provides die necessary audiority because “it governs any matter in which the 
government seeks judicial authorization to engage in certain investigative 
activities.”^'"' More specifically, some of these courts have found tiiat 
compelled disclosure of prospective cell site data is more akin to a tracking 
device placed under a vehicle, as defined in 18 LT.S.C. § ,3117, '’ than to the 
combination of elements comprising the govemmenfs hy"brid theory and, 
dierefore, would prompt the paident prosecutor to obtain a Rule 41 
warrant.’’ 

Even the magistrate and district judges tiiat have accepted hybrid orders 
and issued published decisions on the question have restricted law 
enforcement access to limited cell site information “yielding only generalized 
location data.”’® Magistrate Judge Gorenstein from the Soutiiem District of 
New Y’ork, in what may be the “most cogent expression”'" by a court in 
accepting the government’s hybrid theory, specifically noted: 

[The government’s request pertained to cell site information] tied 
only to telephone calls acUially made or received by the telephone 
user . . . [witli] no data provided as to die location of the cell phone 
when no call is in progress. [And], at any given moment, data is 
provided only as to a single cell tower with which the cell phone is 
communicating. Thus, no data is provided that could be 
“triangulated” to permit die precise location of die cell phone user.®'" 


affidavit or otlier information,” a judge “must issue the warrant if there is probable cause to 
search for and seize a person or property or to install and use a tracking device.” 

75. In re E.D.N.Y. Applicaliem, 396 F. Supp. 2d 294, 322 (E.D.N.Y 2005); see also In n 
WID.N.Y. Application, 415 F. Supp. 2d 211, 219 (W’.D.N.Y 2005) (“|T|he challenge here is to 
die statuto-iy justificadon for . . . [die govemmenfs] applicadoii. . . . "Ilie Court does not agree 
with the government that it should impute to Congress the intent to 'converge’ the 
provisions of the Pen Statute, the SCA, and CAI.F.A to create a vehicle for disclosure of 
prospechve cell information on a real time basis on less than probable cause.”). 

76. “As used in this section, the term ‘tracking device’ means an electronic or 
mechanical device which permits the tracking of the movement of a person or object.” 18 
U,S.C. § 3117(b) (2010). 

77. In re Application for Pen Register and Trap/Trace Device widi Cell Site Location 
Audiority {In n 2005 S.a Tex. Applicatimi}, 396 F. Supp. 2d 747, 753-64 (S.D. Tex. 2005); In 
te E.D.N.Y. Application, 396 F. Supp. 2d at 322. 

78. Location Heating, supra note 19, at 93—94 (Exhibit B to written statement of ludge 
Stephen VVm. Smitli) (collecting Magistrate and Distinct Court published decisions where 
courts have accepted hybnd orders for limited cell site data pertaining to single cell tower 
and call-related information). 

79. Id. at 83. 

80. In re S.D.N.Y. Appheation, 405 F. Supp. 2d 435, 437-48 (S.D.N.Y 2005). ludge 
Gorenstein notes differences between die instant case and diree piibhshed decisions denying 
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Judge Gorenstein further explained tliat his analysis for the instant Order 
was based on tlie “technology that is available to the Government in the 
Distncp” recognising tliat, with respect to future cases, “[lie could not] know 
how . . . technology may change.”™ 

For Judge Gorenstein, then, die current capacitj^ of the cell tower 
netw'ork in question (the court even looked at a map of the location of 
vanous cell towers in lower Manhattan — an area it described as “densely 
populated by cell towers”)®" was a factor in audiorising law enforcement 
access to the cell site data widi a hybrid order.®® It that network’s capabilities 
were to change due to an evolution in technolog)^ that yielded more precise 
location information, the court might rule differently in future cases. Indeed, 
the court’s order might be as ephemeral as the capacities of the specific 
netw'ork the opinion seeks to comprehend at a specific moment in time. Any 
upgrade to tiiat network that would enhance die accuraq^ of its geolocation 
capabilities in the district, made any time after the signing of the opinion, tied 
as It IS to the facts describing the netu'ork’s capacities, could render that 
opinion legally moot. 

5. Divergent Jnterpretatiom of the Standard for Requiring Disclosure of 
Prospective Cell Site Data Create Legal IJncertainty 

^^lien seeking to compel “more precise” prospective location data 
generated by GPS or similar technologies, the DOJ’s policy is to obtain a 
warrant based on probable cause.®"* Wdiilc privacy advocates might view this 
as a small concession by die government, it is at best a transient one, since a 
policy decision by the DOJ is by no means a permanent or legally binding 


gov^emment access to cell site infomiation vvitli a hybrid order insofar as “[t]hese cases 
appear to involve requests for cell site information that go beyond both what has been 
sought in this case and what has actually been received by the Government pursuant to any 
cell site application in this District.” id. (citing in re 2005 S.D. 'i'ex. Application, 396 F. Supp. 
2d 747; In re E.D.N.Y. Application, 396 F. Supp. 2d 294; In n Application of the U.S. for an 
Order Authorizing tlic Installation and Use of a Pen Register and Caller Identification Sys. 
on Tel. Numbers [Sealed], 402 F. Supp. 2d 597 (D. Md. 2005)), 

81. In n S D. ip Y. Application, 405 F. Supp. 2d at 450. 

82. Id. at 437. 

83. See also In re Application of U.S. for an Order, 411 F. Supp. 2d 678, 680-82 (W.D. 
La. 2006) (granting an application for ceU site information consistent with judge Gorenstein’s 
reasoning and scope of production of ccU site infoitnation, recognizing tliat Judge 
Gorenstein “limit[ed] his opinion to the particular application before him” and 
charactenzmg tlic single cell site technology of that time as “not pcrmit[ting] detailed 
tracking of a cell phone user within any residence or building”). 

84. Senate Judidaij 201 1 ECPA Hearing snpra nott 1, at 7 (testimony of James A. Baker, 
Assoc. Deput)” Attorney Gen., U.S. Dep’t of Justice). 
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decision.^" To the extent tliat this policy decision protects privacy, it can be 
so unstable as to be subject to changes in leadership at various levels, even 
witliin a single administration, whose individual decisions implement the 
enforcement and oversight ot a particular policy across vanous field officesd^ 
More troubling from a systemic perspective, however, is the inconsistent 
legal landscape tliat conflicting magistrate and district court decisions create 
across the country, sometimes even within the same district/' The S3^stem 
ncidicr serves law enforcement needs nor proteets privaey interests when 
legal standards are so uncertain. Moreover, as Judge Gorenstein’s opinion 
illustrates, such uncertainty is magnified into legal instabilit}^ potentially to 
the point of unreliability, when a court’s analysis is so tied to the state of 


85. A DO] policy decision, such as a policy requiring a warrant for law enforcement to 
acquire GPS-generated location data, has no binding authority on state or local law 
enforcement practices, and state iiwestigators do not always follow DO| policies, h'or 
example, in Devega v. State, investigators, without a warrant, requested a defendant’s cell 
phone provider to “ping” his phone, which involved sending a signal to locate it through 
GPS information. 689 S.E.2d 293, 299 (Ga. 2010). 

86. Consider, for example. Magistrate judge Feldman’s exchange with an Assistant 
United States Attorney ty.AUSA’^ at oral argument. See hi re ID.D.N.Y'. Application, 415 F. 
Supp. 2d 211, 218 (W.D.K.Y. 2006). Wdiile the government was only seeking “general 
[prospective cell site] location information” in the instant case, the AIJSA conceded that in 
previous “hybrid” applications, the government had sought “prospective cell site data that 
could be used by law enforcement to triangulate the location of a cell phone to a degree 
perhaps beyond ‘general location information.’ ” Id. The court pressed government counsel 
regarding whether die positioii that a hybrid order was appropriate for anytliiiig otlier tliaii 
“general location infomiation” had been abandoned. Tlie AUSA responded: 

Well tliere’s a couple of practical tilings going on. One, we’re before 
magistrate judges diat are the gatekeepers — vcSie trying to convince diem 
that the govemment isn’t being some ruthless, overbearing entity — ^vv’re 
trying to be reasonable. So, therefore, if we can get the magistrate’s ear 
and we don’t have to fight this fight a 2 illion rimes, we’ll back off If you 
have this internal radar that’s going “privacy interest, privacy interest”, 
okay we’h back off But is it possible the argument could be made that we 
could be here on another day having gotten to floor one and now we’re 
trying to get to floor two? Yes. Has tliat been suggested by anyone? 
Absolutely not. 

Id. at 218 11.5; see also Freiwald, s/rpra note 52, at 717 (discussing one U.S. Attorney’s Office’s 
failure to comply witli DOJ poHcy advising agents to establish probable cause when seeldiig 
location data indicating a target’s ladttide and longitude (using either GPS or similarly precise 
data)). 

87. See Location Heating, supra note 19, at 83—85, 93—94 (written statement of Judge 
Stephen Wm. Smith and Exhibit B thereto). Compm^e In re an Application of the U.S. for an 
Order for Prospective CcU Site Location Info, on a Certain Cchular Tcl., No. 06 GRIM. 
MISC. 01, 2006 \XL 468300 (S.D.N.Y. 2006) (denying application for limited single tower 
data), nilh In re S.D.N.Y. AppUcalion, 405 F. Supp. 2d 435 (granting appheation for limited 
single tower data). 



126 


2012] LAW ENFORCEMENT ACCESS TO LOCATION DATA 141 


technolog}' in a particular district at a particular moment in time that it hinges 
upon a court’s own examination of a network map of cell towers in a 
particular district — ^v.diich would now include microcclls, picocclls, and 
femtocells — combined with expert opinion on tlie accuracy of location data 
tliat network could produce.^ The court analyxed and accepted tlie 
government’s hybrid theory' (while, at the same time, limiting its ruling to the 
state of the technology' available to the government in the district at that 
time), but It declared tlie result “unsatisfy'ing” given Congress’s lack of clear 
guidance regarding tlie appropriate standard for law enforcement access to 
prospective cell site dataf^ 

Even the DOJ has acknowledged the need for legislation to clarify' the 
standard governing compelled disclosures of prospective cell site d'ata. The 
DOJ, however, carefully limited its recommendation to “cell tower 
information associated with cell phone calls,” which is perhaps the particular 
area where tlie DOJ seeks specifically to retain the more nimble and efficient 
investigative stand'ard provided by the hybnd order,''’ as opposed to the 
higher probable cause standard” In the DOJ’s view, “(sjome courts . . . have 
conflated cell site location information with more precise GPS (or similar) 
location information”’* and, as previously noted, they are already advising 
prosecutors to seek probable cause warrants tor “more precise” GPS 
location data. 

Witli location information — including single cell tower data — becoming 
only more precise over time and courts continuing to search for an illusory 
“intended” congressional standard to govern law enforcement access to 
prospective location data, the search tor clarity remains an uncertain one at 
best in the absence of congressional action. 

B. Lfgat, Background for ETistoricat, Cf.ij. Sitf, Data 

If the uncertainty' over what standard to apply to prospective location 
information has left courts without a strong sense of direction, that 


88. See In re WeD.N.Y. yipplicalion, 415 F. Supp. 2d at 213 n.3 (reviewing a letter from 
Verizon’s Court Order Compliance Manager “wlrich states that the information sought will 
only ‘identify the general area that the target mobile phone located at die time of a specific 
call’ and diatit ‘cannot pinpoint the exact location of the mobile phone’ ’J. 

89. hi re S.D.N.Y. Application, 405 F. Supp. 2d at 442. 

90. Senate Judidarf 2011 BCPA Heaping, stpra note 7, at 5 (testimony of James A. Baker). 

91. Mr. Baker explains earlier in his congressional testimony that “if an amendment 
were unduly to restrict the ability of law enforcement to quickly and efficiendy determine the 
general location of a terrorist, kidnapper, child predator, computer hacker, or other dangerous 
criminal, it would have a very' real and very human cost.” Id. at 6. 

92. Mr. Baker’s testimony does not cite to specific examples where the DOJ believes 
courts have conflated cell site infomiatioii with more GPS location information. See id. at 7. 
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confusion is becoming even more pervasive with regard to historical cell site 
data. I.ower courts are now beginning to split over the proper access 
standard to apply to it as well. In this context, as with prospeetive eell site 
location data, 18 U.S.C. § 2703(c) permits tlie government to compel “a 
provider of electronic communications sennee or remote computing service 
to disclose a record or other information pertaining to a subscriber to or 
customer of such service (not including the contents of communications) 
only when die government entity . . . obtains a court order for disclosure 
under subsection (d) of this section.”"’ Stated more simply, a D Order 
“compels [production of] all non-content records.”"’ 

1. The DOJ’s Interpretation of the Standard for Obtaining Historical 
Cell Site Data 

The DOJ takes the position that historical cell site information satisfies 
each of die three elements necessary to fall within die scope of 18 U.S.C. 
§ 2703."' First, a cell phone company is a provider of “electronic 
communications sendee” to the public."'’ Second, “cell site information 
constitutes ‘a record of other information pertaining to a subscriber or to a 
customer of such sendee (not including the contents of 
communications).’ More specifically, historical cell site information “is a 
record stored by the provider concerning the particular cell towvr used by a 
subscriber to make a particular cell phone call, and is therefore ‘a record or 


93. 18 U.S.C. § 2703(c) (2010). 

94. Orin S. Kerr, A User’s Guide tx> the Stored Communuatiom Act. and a i agislator’s Guide tx> 
Amending It. 72 ClKO. Wash. I.. Rkv. 1208, 1222 (2004). 

95. Brief for the United .States at 8—9, in re the Application of the LIS. for an Order 
Directing a Provider of Elec. Comme’n Serv. To Disclose Records to the Gov’t (Appeal ofJn 
re \V.D. Pa. Application), 620 F.3d 304 (3d Cir. 2010) (No. 08-4227), 2009 WT 3866618. 

96. Pd. at 10. The Wiretap Act and SCA define electronic communication service 
(“ECS”) to mean “any service wliich provides to users diereof die ability to send or receive 
wire or electronic communicatious.” 18 U.S.C. §§ 2510(15), 2711(1). Cell phone service 
providers provide their customers uadi die ability to send “udre commuiiicatioiis,” and dius 
they are providers of electronic communications service. See § 2510(1), (1.5). Moreover, the 
DOJ takes the position that: 

[a] “wire communication” necessarily involves the human voice. See 
§ 2510(1) (definmg “wire commumcatiorij and § 2510 (defining “aural 
transfer”); S. Rep. No. 541, 99th Cong., 2d Sess. 11 (1986), reprinted in 
1986 U.S. Code Cong. & Admin. News 3555, 3565 (“ccUular 
communications — ^whether thev arc bctu'ccn two cellular telephones or 
between a cellular telephone and a land line’ telephone — are included in 
die definition of ‘wire comimmicarions’ and are covered by die stahite’J. 

Brief for the United States, sup'a note 95, at 11 n.lO. 

97. Brief for die United States, supra rscsiet 95, at 11. 
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other information pertaining to a subscriber or customer.’ Finally, “cell 
site information is non-content information, as it does not provide the 
content of any phone conversation tlic user has had over tlic cell phone. 
Based on tliis analysis, prosecutors and agents regularly use D Orders to 
compel historical location information from third-party providers. 

2. Judicial hiterpretatwn of the S tandard for Obtaining Historical 
Cell Site Data 

T.ower courts have, for the most part, accepted the government’s use of a 
D Order to eompel histoncal cell site infonnation.^”” However, one circuit 
court has held that there may be circumstances in which a judge can require a 
probable cause showing before authorizing a government-compelled 
disclosure of historical cell site information. 

a) The Third Circuit Finds That Magistrate Judges Have the 
Discretion To Require Probable Cause 

A government appeal of a magistrate judge’s opinion'”^ denying tlic use 
ot a D Order to compel historical cell site data led tite Third Circuit to 
consider whether a D Order based on “specific and articulable facts” can be 
sufficient to allow the government to compel the production of historical cell 
site data and whether, in some cases, a court should apply the Fourth 
Amendment’s probable cause requirement in place of die more relaxed 
provisions of the SCA governing tlie disclosure of historical cell site 
information.''’"’ The Third Circuit held that historical cell site data “is 
obtainable under a § 2703(d) order and that such an order does not require 


98. Jd. (citing In n S.D.N.Y. Application, 405 F. Supp. 2d 435, 444 (S.D.N.Y 2005), and 
noting that cell site data is ‘Snfonnation’’ and “ ‘pertain[s]’ to a subscriber or customer of 
cellular telephone, ser\nce”). 

99. Id. (citing 18 ll.S.Ci. § 2.510(8) and defining the “contents” of communications to 
mclude infonnation concerning its “substance, purport, or meaning”). 

100. See In re Applications of tlic U.S. for Orders Pursuant to Title 18, U.S. Code, Section 
2703(d), 509 F. Supp. 2d 76, 82 (D. Mass. 2007) (granting the government’s application for 
historical cell site infonnation based on the goveminenfs statutory analysis of 18 U.S.C. 
§§ 2703(c), (d)); id. at 79 n.5 (collecting cases where courts have assumed or applied in dicta 
diat compelling disclosure of historical cell site data is proper under § 2703(d) of die SCA). 

101. bi re AppHcation of the U.S, for an Order Directing a Provider of Elec. Comme’n 
Serv. I'o Disclose Records to the Gov’t (Jn re W^.D. Pa. Application), 534 F. Supp. 2d 585 
(\^aD. Pa. 2008). On appeal firom the Magistrate Judge to the District Court, die court 
“recognized 'the important and complex matters presented in this case,’ but affirmed in a 
tu^o page order witliout analysis.” y'ippeal of In n W.D. Pa. /ipplicalion, 620 F.3d 304 (3d Gr. 
2010) (citing I;/ re WSD. Pa. Application, 534 F. Supp. 2d 585). 

102. AppealofJn re W.D. Pa. Application, 620 F.3d 304. 
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tlie traditional probable cause determination. Tlie Third Circuit also 
found, however, that magistrate judges have the discretion to turn down a 
government application for a D Order even when die D Order standard has 
been satisfied and, instead, require a probable cause showing. This 
determination is based upon the Third Circuit’s reading of D Order statutorj' 
language as “language of permission rather than mandate.”*'-'^ The extent to 
which a magistrate judge has discretion to deny a D Order is unclear, as the 
opinion merely instructs diat the option to require a warrant “be used 
sparingly because Congress also included die option of a § 2703(d) order,” 
that judges do not have “arbitrary” discretion, and in those cases where a 
magistrate judge does require a warrant, she must “make fact findings and 
give a full explanation that balances the government’s need (not merely 
desire) for die infomiation widi the privacy interests of cell phone users.” “ 

In his concurring opinion. Judge Tashima noted his agreement with most 
of the reasoning of die majority opinion, but he was concerned that 
“contradictoty signals” leave magistrate judges and prosecutors with a lack of 
“standards by which to judge whether an application for a § 2703(d) order is 
or is not legally sufficient.”“'^ Judge Tashima explained that “the majonty 
suggests that Congress did not intend to circumscribe a magistrate’s 
iliscretion in detemiining whether or not to issue a court order, while at die 
same time, acknowledging that [ojrders of a magistrate judge must be 
supported by reasons that are consistent with the standard applicable under 
the statute).]’ Contraipr to the majority’s statement that “a magistrate 
judge does not have arbitrary discretion,” Judge Tashima suggests that the 
majority’s opinion perpetuates exaedy that, because: 

it provides no standards for die approval or disapproval of an 
application for an order under § 2703(d) . . . [and it] vests 
magistrate judges witii arbitraiy^ and uncabined discretion to grant 


103. Id. at 313. 

104. Id. at 316 (“Wc begin with the text. Section 2703(d) states that a ‘court order for 
disclosure under subsection (b) or (c) maj bt issued by any court that is a couil: of competent 
jurisdiction and shall issue only if the intemiediate standard is met. 18 U.S.C. % 2703(d) 
(emphasis added). We focus first on die language that an order ‘may be issued’ if the 
appropriate standard is met. Tliis is die language of permission, radier dian mandate. If 
(iongress wished that courts ‘shall,’ rather than ‘may,’ issue § 2703(d) orders whenever the 
mtermediate standard is met. Congress could easily have said so. At the very least, die use of 
'may issue’ strongly imphes court discretion, an implication bolstered by the subsequent use 
of the phrase 'only if’ in die same sentence. ”)i. 

105. 17. at 316, 319. 

106. Id. at 320 (Tashima, ]., concurring). 

107. Id. 
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or deny issuance of § 2703(d) orders at the whmi of die magistrate, 
even when the conditions of the statute are met/'’® 

Indeed, the vety^ instability that currently plagues the prospective cell site data 
legal landscape might also “fester” with respect to historical access standards 
if the Third Circuit’s “rule,” giving magistrate judges discretion to deny a D 
Order without standards or guidance about when such denial is appropriate, 
were to become the law of the land. 

In the wake of the Third Circuit’s opinion, some magistrate judges who 
once granted access to historical cell site data wnth a D Order are now 
revisiting that practice. In Magistrate Judge Smith’s recent opinion, however, 
die court placed more significance on “new technology” that has “altered the 
legal landscape even more profoundly than the new caselaw.”^“ Judge 
Smith’s opinion meticulously' documents the changes in technology leading 
to his determination that “court decisions allowing the Government to 
compel cell site data wtithout a probable cause wurrant wxre based on 
yestery'ear’s assumption that cell site data (especially from a single tower) 
could locate users only imprecisely'.” After establishing the state of current 
technology and its rapid pace of change in the direction of increased accuracy 
for die factual record, Judge Smith conducted a constitutional analysis and 
ultimately concluded that a compelled warrantless disclosure of sixty days of 
historical cell site data violates the Fourth Amendment.**"’ 

b) 'I'he D.C. Circuit’s “Mosaic I'lieory” 

Prior to Judge Smith’s opinion, Magistrate Judge Orenstein, another 
judge who previously granted requests for historical cell site data pursuant to 
a D Order, also denied the government’s application absent a warrant based 


108. M 

109. For a more extended analysis and critique of the Third Circuit opinion, see Orin S. 
Ke rr, ’\ bird Cimiit Rules I'hat Magistrate Judges I huie Discretion I 'o Reject Non-warrant Court, Order 
Applications and Require Search Warrants To Obtain Historical Cell Site Records, VOLOKH 
Conspiracy (Sept 8, 2010), http://volokh,com/2010/09/08/third-circuit-rules-that- 
magistratc-judgcs-havc-discrction-to-rcjcct-court-ordcr-apphcation-aiid-rcquirc-scarch-war 
rants-to-obtain-historical-cell-site-recoi'ds/. 

110. In re Application of die U.S. for Historical Cell Site Data (In te 2010 S.D. Tex. 
Application)., 747 F. Supp. 2d 827 (S.D. Tex. 2010). 

HI. Mat 830. 

112. The court’s reasoning can he summarized as follows: (1) under current location 
teclinolog)^ cch site information reveals non-public information about constitutioiially 
protected spaces; (2) historical cell site records are subject to Fourth Amendment protection 
under the prolonged surveillance doctrine of United States v. Maynard, 615 F.2d 544 (D.C. Cir. 
2010); and (3) the government has not demonstrated that the location data sought was 
voluntarily conveyed by the user and therefore Smith v. Maijland, 442 U.S. 735 (1979), does 
not eliminate a legitniiate expectation of privacy. 



131 


146 BERKELEY TECHNOLOGY LAW JOURNAL [Vol. 27:117 


on a probable cause showing.'^’ In finding the governmenfs D Order 
application for historical cell site data over a fifp^-eight-day period to be an 
unreasonable search and seizure under die Fourtli Amendnient,”* Judge 
Orenstein’s opinion relies heavily on a recent D.C. Circuit Fourth 
Amendment decision, United States v. Siaynard}'^^ The court in Maynard 
considered whether the government’s warrantless use of a GPS device placed 
on a vehicle to track a suspect’s movements for twenty-eight days, m?cntv- 
four hours a day, was an unreasonable search under the Fourth Amendment. 
In concluding that the long-term GPS surveillance of movements exposed to 
public view was a search,'”' the Maynard court recognized a novel “mosaic 
theory” of the Fourth Amendment.'" Specifically, the court explained: 

Prolonged surveillance reveals types of infonnation not revealed by 
short term surveillance, . . . [and] can reveal more about a person 
dian does any individual trip viewed in isolation .... A person who 
knows all of another’s travels can deduce he is a weekly church 
gper, a heavy drinker, a regular at die gym, an unfaidiful husband, 
an outpatient receiving medical treatment, an associate of particular 
individuals or political groups — and not just one such fact about a 
person, but all such facts."* 

As Professor Orin S. Iverr obsemes, under die mosaic theory, a court 
determines whether government conduct is a search “not by whetlier a 
particular individual act is a search, but rather whether an entire course of 
conduct, viewed collcchvcly, amounts to a search.”"" Individual acts tiiat 


113. In re Application of the U.S. for an Order Authorizing Release of Historical Cell- 
Site Info. {In re 2010 E.D.N.Y. Applicalkn), 736 F. Supp. 2d 578 (E.D.N.Y 2010). Bui see In re 
Application of the U.S. for an Order Authorizing Disclosure of Historical Cell Site Info, for 
Tel. No. [redacted], Misc. No. 11-449, at 5 (D.D.C. Oct. 3, 2011) (Lamberdi, C.F), available at 
http://legaltinies.typepad.c.oiTi/ files /lamberth_ruling.pdf (liolding that a D Order permits the 
government to compel disclosure of historical location data without a probable, cause search 
warrant and that Alaynard does not control the question). 

114. In re 2010 EMMY. Application, 736 F. Supp. 2d at 582. 

115. United States v. Maynard, 615 F.3d 544 (D.C. Cir. 2010), reb'g denied sub nom. United 
States V. Jones, 625 F.3d 766 p.C. Cir. 2010), a[fd, 132 S. Ct. 945 (2012). 

116. In reachmg its decision, die court explained how the reasonmg of Knotts did not 
foreclose die conclusion diat long-temi surveillance consdtutes a search. Alaynard. 615 F.3d 
at 556—58. Indeed, the Court interpreted die Knotts opinion as reserving die question of 
whether pmbnged use of a beeper device would require a warrant. Id. at 556. Hie court 
acknowledged, however, that appellate courts in diree odicr circuits have reached opposite 
conclusions under Knotts. Id. at 557-58. 

117. Wat 562. 

118. It/, (footnote omitted). 

119. See Orin S. Kerr, D.C. Circuit Introduces “Alosaic Theory” of Fourth Amendment, Holds 
CPS Alonitoring a Fourth Amendment Search, VOLOKH CONSPIRACY (Aug. 6, 2010), http:// 
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may not, in tlieir own right, be searches can become searches when 
committed in particular combinations Thus in Maynard, the court does not 
look at individual data recordings from die GPS device to determine 
whetlier, tor example, indiyidual trips are searchesd^^ Instead, “die Court 
examines the entirety of sunmillance over a one-mondi period and views it as 
one single ‘thing’ ” subject to Fourth Amendment analysis.'** But at what 
point would a single act or a series of acts amount to the prolonged 
sunreillance diat triggers the mosaic theory and how does a prosecutor, 
judge, or defense attorney recognize the phenomenon? The Maynard court 
gives no real guidance in this regard."’ Indeed, the Solicitor General in the 
government’s brief filed in Jones (formerly Maynard) has argued: “|T|he 
‘mosaic’ theory" is unworkable. Law enforcement officers could not predict 
when dieir observations of public movements would yield a larger pattern 
and convert legitimate short-term sun"eillance into a search. Courts would be 
hard pressed to pinpoint diat moment even in retrospect.”"’ 

X^Tiile acknowdedging primary" factual differences between the real-time 
GPS vehicle tracking in Maynard and die government’s application for tv"o 
months’ worth of historical cell site data. Judge Orensteiii finds die Maynard 
opinion “persuasive” support for his analysis that the Fourth Amendment 


volokh.com/ 2010/08/ 06/ d-c-ciixuit-introduces-mosaic-theoiy-of-fourth-amendment- 
holds-gps-niouitoriiig-a-foi.irth- amendment-search/. 

120 . U 

121. Id. 

122. Id. 

123. In United States v. Cmvas-Verey, 640 h.3d 272 (7th Cir. 2011), tlie Seventh Circuit 
considered whether Maynard applied to a 60-hour, “factually straightforward” waiTandess 
GPS surveillance. Id. at 274. In determining that Maynard did not apply to the case, the 
majority opinion reasoned tliat Maynarif's 28-day surveillance was much lengdiier tlian the 
00-hour survehlance before die Seventli Circuit and the “single trip” in die instant case did 
not “expose or risk exposing” the “tw"ists and turns” of the defendant’s life, “including 
possible criminal activities, for a long period.” \d. at 274. In concluding Maynard did not 
apply, however, the majonty emphasized “the present case ... is not meant to approve or 
disapprove the result the D.G Circuit reached under the facts of that case.” Id. at 274 n.3. 
The concurnng and dissenting opinions in Cim’os-Perey do prov-idc some analysis oi Maynard. 
Indeed, the concurring opinion generally finds Maynard’s mosaic theory “unworkable,” with 
Judge Flauiii mdicatiiig that it is not “obvious” to lihn where the Maynard Court w'ould 
“draw coiistitutioiial Imes around Cuevas-Perez’s sixty-hour journey.” Id. at 282. In contrast. 
Judge Wood’s dissent rejects die majority’s “single trip” description, finding much more 
simUaiity' between Cuevas-Perez’s “60 hour odyssey across 1,6,30 miles” and the prolonged 
surveillance in Maynard. Id. at 293. 

124. See snpra note 115. 

125. Brief for the United States at 14, United States v. Jones, 132 S. Ct. 945 (2012) (No. 
10-1259), 2011 \XT 3561881. Indeed, Respondent Jones docs not employ the Maynard 
“mosaic theory” in his brief to the Supreme Court. See Brief for Respondent Antoine [ones 
stdS. Jones, 132 S. Cf 945 (2012) (No. 10-1259), 2011 WT 4479076. 




133 


148 BERKELEY TECHNOLOGY LAW JOURNAL [Vol. 27:117 


requires tlie government to obtain a warrant to compel tlie location 
information. I.ower courts’ reliance on MaynanFi “mosaic theor)',” 
however, raises questions, once again, about tlie viability of a series of cases 
tliat give prosecutors and judges little to no guidance about when and what 
amount of location data is subject to Fourth Amendment protection. Judge 
Orenstein, for example, found that fifty-eight days of historical cell site data 
required a warrant under the reasoning in Maynard but, in a later opinion 
applydng Maynard, he granted an application for discreet amounts of data 
spanning a twenty-one-day period under a D Order.'^’ While such opinions 
may be heralded as a “victory” for privacy interests because, among other 
things, they have the effect of destabilizing the govemmenfs use of the D 
Order, they serve neither privacy nor law enforcement interests insofar as 
tliey perpetuate a legal landscape in which lower courts continue to “search,” 
in vain, for the appropriate standards to apply. 

i. The Jones Dedsion 

Notvhthstanding such criticism of the mosaic theory in Maynard, the 
concurring opinions in llniLtd Slaks i>. Jone.f~° suggest that, in some future 
case, there may be five votes tor a mosaic-type I'burth Amendment theory^ 
holding that “the use of longer term GPS monitoring in investigations of 
most offenses impinges on expectations of pravacyv”^"^ Indeed, justice Alito’s 


126. Jk re 2010 E.D.N.Y. Application, 736 F. Supp. 2d 578, 584 (F,.D.N.Y. 2010). This 
Article does not focus on appropriate standards for law enforcement use of (IPS tracking 
devices installed on vehicles — which do not involve compelled disclosures from third-party^ 
fiCPA-covered providers — and which, therefore, as a matter of pohey, may implicate slightly 
different equities and interests for Congress to consider when drafting legislation. 

127. In re Application of the U.S. for an Order Authorizing Release of Historical Cell- 
Site Info., No. ll-MC-0113, 2011 WU 679925 (E.D.N.Y.' 2011). The govemmenfs 
application for historical cell site data sought infomiation from one phone for a tliree-day 
period, a six-day period from die same phone commencing less than a mondi later, and a 
twlve-day period from a second phone believ-ed to hav-e been used in furtherance of the 
offenses under investigation. Id. at *1. The court distmguished the result of the instant case 
from that of Alaynard primarily because the court could not “assume that the mformation 
gleaned over such shorter periods, separated by breaks of weeks or months, would 
necessarily^ be as revealing as the sustained month-long monitoring at issue in AlaynardA Jd. at 
*2. In making diis distinction, however, the court acknowledged tliat “any such line drawing 
is, at least to some extent, arbitrary and tlie need for such arbitrariness arguably undermines 
die persuasiveness oi. Maynard, and of [tliis court’s] prior decisions.” Id. For furdier analyisis 
and critique of this decision, see Orin S. Kerr, Applying the Mo.saic 'Theory of the fourth 
Amendment to Disclosure cf Stored Records, Volokh Conspiracy (Apr. 5, 2011), http://v-olokh. 
com/2011 /04/05/applymg-the-mosaic-theory'-of-the- fourth- amendment-to-disclosure-of- 
storcd-rccords/. 

128. 132S.Ct. 945 (2012). 

129. Id. at 964 (Alito, J, concurring). Justices Ginshurg, Breyer, and Kagan joined Justice 
Alito’s concurrence. Vidiile Justice Sotoniayor did not join die Alito concurrence, she states 
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concurrence invokes tlie novel aggregative Fourth Amendment tlieory first 
articulated by the D.C. Circuit in Maynard. The Alito concurrence posits that 
“relatively short-term monitoring of a person’s movements on public streets 
accords widi expectations of privacy diat our society has recognized as 
reasonable” while law enforcement’s “secretiy monitor[ing] and catalogu[ing] 
every single movement of an individual’s car for a vetyr long period” does not 
accord with reasonable expectations of privacy/^° Likewise, Maynard 
previously recognized diat “[pjrolonged sunreillance reveals types of 
information not revealed by short term surveillance.” ' 

^X'llile Justice Alito’s concurrence applies the Kal^^"' “expectation-of 
privacy test,” the majonty opinion, authored by Justice Scalia, bases its 
holding partially on a trespass theory: “We hold that the Government’s 
installation of a GPS device on a target’s vehicle, and its use of that device to 
monitor the vehicle’s movements, constitutes a ‘search.’ Justice Scalia 
defines the offending conduct further stating “the Government physically 
occupied private property for the purpose of obtaining information.” 
Consequendy, diough “[tjrespass alone does not qualify [as a search],” a 
search does occur when it is “conjoined” with “an attempt to find something 
or to obtain information.”^'’^ 

Justice Alito criticizes this approach because, among other things, it 
“largely disregards what is really important (die use of a GPS for long-term 
tracking) and instead attaches great significance to something that most 
would view as relatively minor (attaching to tire bottom of a car a small, light 
object that does not interfere in any way whth the car’s operation). Indeed, 
the attachment-tocused majonty opinion does not address instances where 
die use of GPS solely involves the transmission of radio or odier electronic 


in her own concurrence. ‘‘T agree wHth justice Al.l I'O that, at the least, ‘longer term GPS 
monitoring in investigations of most offenses impinges on expectations of privacy/ ” \d. at 
955 (Sotomayor, concumng). See abo Orin S. Kerr, What’s the Status oj the Mosaic 'I'heoiy 
After [ones? VOLOICH CONSPIRACY (Jan. 23, 2012), http:/ /volokh.com/2012/01/23/whats- 
tlic-status-of-thc-mosaic-thcory-aftcr-joncs/ (explaining that the mosaic theoiy" ‘lives”). 

130. Jones^ 132 S. Ct. at 964 (Alito, concurriiTg). 

131. United States v. Maynard, 615 F.3d 544, 562 (D.C. Cir. 2010), denied suh nowi. 
United States v. Jones, 625 F.3d 766 (D.C. Gr. 2010), ajf’d, 132 S. Ct. 945 (2012). 

132. Katz V. United States, 389 U.S. 347 (1967). “As justice Harlan’s oft-quoted 
concurrence described it, a Fourth iVmendment search occurs when the government violates 
a subjective expectation of privacy that society recognizes as reasonable.” KvUo v. United 
States, 533 U.S. 27, 33 (2001) (citing Katz, 389 U.S. at 361). 

133. 132 S. Ct. 945. 

134. Id. 

135. Jti. at 951 n.5. 

136. Id. at 961 (Alito, j., concurriiig). 
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signals not enabled by tlie government’s direct physical trespass — such as 
tracking a target’s cell phoned^' Wliile acknowledging that government 
tracking though electronic means witliout actual physical trespass may be “an 
unconstitutional invasion ot privacy,” tlie majonty opinion asserts “the 
present case does not require us to answer that question.”^^* Moreover, the 
majority opinion criticises the line-drawing problems the Alito concurrence 
presents: 

[I]t remains unexplained why a 4-week investigation is “surely” too 
long and why a dnig-trafficking conspiracy involving substantial 
amounts of cash and narcotics is not an “extraordinary offens[e]” 
which may permit longer observation. MTiat of a 2-dav monitoring 
of a suspected puiweyor of stolen electronics? Or of a 6-mondi 
monitoring of a suspected terrorist?’ ’^ 

Indeed, consistent with tlae difficulties Maynard raised. Justice Alito’s 
adoption of a mosaic-type theory provides no significant guidance to law 
enforcement, judges, and industry^ about when Fourth Amendment concerns 
materialize: “We need not identify with precision the point at which the 
tracking of this v'ehicle became a search, for the line was surely crossed 
before the 4-week mark.”'*'' Rather than creating clarity in the law, the Alito 
concurrence perpetuates, perhaps evmn intensifies, the confusion surrounding 
appropnatc law enforcement standards for access to location data. 

4-. The Inrportance of Tegislative Clanty in the Face of Hapid 
Technological Change 

Scholars and advocates may legitimately disagree about Fourth 
Amendment theory^ and about courts’ application of the Fourth Amendment 
to government-compelled disclosures of cell site data. Notwithstanding this 
constitutional debate, however, the current pace of technological change in 
tills area has given rise to inordinately difficult analytical challenges and 
highlighted a consequent need for Congress to clarify or amend the law. 
Chief among these challenges is the current instability^ in the law created 
when courts must struggle to find congressional intent in laws that predate 
die current state of location technology^ — in short, to find intention in the 
absence of a stable object. In the face of this ultimately futile search for 
historical interpretive authority, courts must grapple directly' with the legal 


137. Jd. at 953 (“Situations mvolving merely the transmission of electronic signals 
without trespass would remain subject to the Kaly_ analy'sis.”). 

138. Id. 

139. Id. (citation omitted). 

140. Id. at 964 (Akto, f, concurring). 
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implications that enormously complex and quickly evolving location 
technologies raise in conjunction with the facts of a given case. Finally, 
courts must try to perform the foregoing analysis while simultaneously 
contronting any implications tire rapid rate of change in the capabilities of 
location technolog)' might have upon the reasonable scope of tlieir decisions. 
To avoid these difficult acts of legal navigation, policymakers should enact 
laws containing dear standards that strike the right balance among law 
enforcement needs and privacy and industry interests. These standards must 
also be flexible enough to accommodate the pace of technological change to 
a degree that renders it a moot consideration in any court’s analysis. 

C. QuKS'i'ioNS Raised by 'i'he Two Kxisi'inc S'iand,ards bor 

CoAtPELLiNG Disclosure of Location Data 

1 . Wdjal Does a “D ” Order JLequire Lhe Goiwrimenl To Show? 

The call by some advocates for a probable cause standard to govern all 
law enforcement compelled disclosures of location data is, of course, a 
recognition that the D Order affords a less stnngent showing by' law 
enforcement than tliat required to meet probable cause. Specifically, to 
obtain a D Order, law enforcement must provide “specific and articulable 
facts that there are reasonable grounds to believe” that the information to be 
compelled “is relevant and material to an ongoing investigation.”^’'^ Some 
scholars have referred to the D Order standard as a “Teny-stop” standard, a 
reference to Teny v. Ohio, where the Supreme Court created tlae reasonable 
suspicion standard for sidewalk stop-and-frisk encounters.'"''’ The Tetiy 
standard is met “when an officer ‘point[s] to specific and articulable facts 
which, taken together widi rational inferences from tliose facts, evince more 


141. hee lI.R. Rkp. No. 10TS37, at 31 (1994) (indicating that the. D Order is “an 
mteimediate standard . . . higher than a subpoena, but not a probable cause warrant”). 

142. 18 U.S.C. § 2703(d) (2010). 

143. 392 U.S. i, 30 (1968); see also Christopher Slobogin, Privacy at Risk: The 
New Government Surveillance and the Fourth Amendment 175-76 (2007) 
(arguing that die D Order standard, although perhaps intended to be more demanding than 
die relevance standard required for a subpoena, may not be much different: “[e]ven if 
matehal is meant to augment relevant, it does not add much; materiahty, in evidence law, 
means merely that the evidence be logically related to a proposition in the case”); Freiwald, 
supra note 52, at 692 (discussing tiiat the D Order standanl pei-mits much broader inquiries 
mto a much wider range of targets than the probable cause standard); Paul Ohm, Probably 
Probable Cause: The DimnisMng Importance of Justification Standards, 54 Mink. L. Rev. 1514, 
1521-22 (2010) (noting that the D Order standard “is probably much more stringent than 
the mere-relevance subpoena standard” and is set by Congress “at a high enough level to 
prevent police dshhig expeditions”). 



137 


152 BERKELEY TECHNOLOGY LAW JOURNAL [Vol. 27:117 


tlian an inchoate and unparticulariaed suspicion or hunch of criminal 
activity.’ 

From a practical standpoint, the D Order standard facilitates law 
enforcement aceess to non-content records at the early stages of an 
investigation, when the government is unlikely to meet the higher probable 
cause standard. In a recent case not involving location information, the DOJ 
asserted that the D Order standard “derives from the Supreme Court’s 
decision in Tctt}'” and thus “is no more onerous than the Terry rule.”** As 
such, die word “material” in 18 U.S.C. § 2703(d) “does not transform the 
§ 2703(d) standard into one tiiat requires a showing that the records sought 
are ‘vital,’ ‘highly relevant,’ or ‘essential.’ Indeed, the scope of a D Order 
may be “appropriate even if it compels disclosure of some unhelpful 
information,” as “ ‘§ 27ti3(d) is routinely used to compel disclosure of 
records, only some of which are later determined to be essential to the 
government’s case.’ For example, if investigators compel location 
information for every cell phone in the vicinity? of a murder scene for a 
specific period of time, they are likely to obtain rmkmtit locution information 
about innocent people who just happened to be in a particular place at a 
particular time in addition to information about the presence of the murderer 
or witnesses who might have seen the murderer. 

Broadening tlic scope of a request for location information beyond, but 
in relation to, a known target can advance an investigation strategically. Law 
enforcement, in certain circumstances, might request the location 
information of all individuals who were called by or made calls to a particular 
target.^’'* This practice, sometimes referred to as a “community of interest” 
request, is of particular concern to privacy advocates,^"'^'’ but it can, for 


144. United States v. Mason. 628 F.3d 123, 128 (4th Cir. 2010) (quoting United States ya 
B ranch, 537 U3d 328, 336 (4th Car. 2008)). 

145. (Tovemment’s Response to Objections of Three Twitter Subsenbers to Magistrate 
judge’s March 11, 2011 Opinion Denying Motion To Vacate and Deming in Part Motion 
To Unseal at 8-9, h Application of die U.S. for an Order Pursuant to 18 U.S.C. § 2703(d), 
2011 WL 5508991 (E.D. Va. 2011) (Misc. Nos. l:ll-DM-3, lU-GJ-3793 & l:ll-EC-3), m/ab/e 
athx\\y./ / files.cloudprivacy.net/govennent_opp.pdf. 

146. Id at 8-9 (quoting Subscribers’ Objections). 

147. Id. at 8 (quoting Magistrate judge Buchanan’s Opinion and Order of March 11, 2011). 

148. .See Home Judidafy 2010 hCPA Kejbm Hearing, supra note 18, at 29—30 (written 
statement of Albert Gidari, Perkins Coie LLP) (explaining diat widi respect to location 
information of specific users, many orders now require disclosure of the location of all of 
die associates who were caked by or made calls to a target). 

149. Some privacy scholars express strong concerns with a standard diat '^allows the 
government to seek location information about apparently innocent parties regularly,” 
noting tliat conmiunit)^ of interest requests proAde law enforcement with infonnaUon about 
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example, enable law enforcement to identify unknown suspects potentially 
involved in criminal activity with a known targetd^” 

Law enforcement often needs the ability to cast a wider investigative net 
at early stages of an investigation and, assuming the government’s 
interpretation is correct, the D Order standard facilitates this “over- 
collection” of information. But insofar as tlie D Order standard does 
facilitate an often necessary over-collection of information, to what extent does 
It adequately prevent unnecessary over-collection of infomiation? In other 
w'ords, should not the D Order standard explicitly require that a sufficient 
nexus exist between the scope of the location information requested and tlie 
criminal activity being investigated? 

If so, how^ should this nexus standard be examined by courts? 
Dctcnnining whctlicr an application reflects a time period tailored to the 
criminal activity being investigated is one inquiry^ lor courts to make in an 
effort to legitimately cabin the amount of information collected. A single 


individuals only tenuously connected to a crime witliout the judicial oveisiglit tliat a waiTant 
guarantees. See Freiwald, strpraaott 52, at 718. 

150. Consider the foUowuig scenario: British authorities at an airport package transit x- 
ray station in Coventry, England x-rayed a package and discovered a .375 Magnum revolver 
hidden inside a child’s toy boat. More packages containing weapons and ammunition 
concealed inside children’s toys were also discovered. VClien the revolver Irom the first 
package was removed, agents noticed that the gun’s serial number had been filed down, but 
forensic analysis reconstructed the number, allowing law enforcement to trace the gun back 
to a dealer with a known identty and n female gun purchaser with a known identity in .South 
Honda. I'he packages had also been mailed from South Honda via express mail, which 
allowed agents to identify the location, time, and date that the package was mailed. Cameras 
inside those post offices recorded video showing two men mailing the first package 
contahihig tlie .357 Magmuii revolver. No further information identifying tliose men wus 
known at tlie time. It is reasonable to assume tliat tlie woman who purchased die revolver 
(wdiose identity^ law enforcement had confiimed) called or was called by' the men who mailed 
the package. One way' to assist law' enforcement in identifying the men (w'ho continued to 
mail packages ultimately discovered at Coventry airport) w'ould be to obtain location 
mformation focused on the mdividuals in contact with the knowm female gun purchaser. 

This factual scenario is taken from a real case. United States v. Claxton, No. 99-06176 
(S.D. Fla. June 13, 2000) (Ferguson, ].), prosecuted by Stephanie in 1999-2000 involving a 
cell of IRA operatives who came to die United States, purchased weapons illegally, hid them 
m cluldren’s toys and large, hollowed-out computer towers, and mailed them to die Republic 
of Ireland u'liere they w'ould be smuggled into Belfast. This operation w'as occurring during a 
critical time in the peace process and the weapons u'ere intended to replace the cache of 
weapons being turned over as part of die Good Friday Agreements. File factual narcative 
described is condensed to illustrate how' a “community of mterest” request would have 
assisted in identifying die identities of the men mailmg the packages, had such a practice 
been in use at that time. For mote information about the case, see Mike Claiy, Lmx Vlmda 
Lavs Attracted IRA, REGISTER- GUARD (Eugene, Or.), June 8, 2000, at 6A, available at http:// 
goo.gl/S6BgC. 
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bank robbery occurring over tlie course of an hour committed by a few 
suspects, for example, would likely require a narrower collection of 
information tlian a sophisticated drug conspiracy covering multiple 
jurisdictions with multiple conspirators occupying different roles and 
performing different tasks. Not only would the length of time reflected in the 
bank robbery D Order application likely be shorter than in the drug 
conspiracy application, but the number of individuals targeted (known and 
unknown) might also be fev?er. In certain types of investigations, identities of 
targets are not initially known, but locations where crimes or activaties 
relevant to determining the identities of suspects are known. WJien the 
request for the location data is centered on a place where an activity 
occurred, courts can ensure diat the length of the request (i.e., from “'lime 
X” to “Time Y”) is sufficiently tailored to when tlie investigation suggests 
that the suspects were present at the location. Similarly, when community of 
interest requests arc made, courts could ensure that the breadtli of location 
information requested about individuals who called or were called by a target 
IS reasonable in light of investigative facts desenbed in the application. There 
are, of course, many permutations of how the scope of a request for location 
data would manifest in a particular investigation. Considering that D Orders 
necessanly facilitate an over-collection of infonnation, however. Congress 
could amend the lang^iage of § 2703(d) to ensure that courts are examining 
whether a sufficient nexus exists betv^een die scope of the location 
information requested and the criminal activity being investigated. 

Z Frobabk Cause of Whati 

A strict probable cause standard for the disclosure of location 
information could interfere with legitimate law enforcement objectives. Some 
of the privacy concerns motivating the advocacy for the application of a 
probable cause standard to all law enforcement compelled disclosures of any 
and all location information arc discussed later in Part V. At this stage in tlic 
analysis, however, it is useful to explore how a strict definif onal application 
of the probable cause standard — ^as articulated in Rule 4U' — might unduly 
limit some of the basic law enforcement uses of prospective and historical 
location intonnation to the degree tliat legitimate investigative activities 


151. See Fed. R. Grim. P. 41(c) (listing categories of probable cause: “(1) evidence of a 
crime; (2) contraband, fruits of crime, or other items illegally possessed; (3) property^ 
designed for use, intended for use, or used in committing a crime; or (4) a person to be 
arrested or a person who is unlawfully restrainedgi. 




140 


2012] LAW ENFORCEMENT ACCESS TO LOCATION DATA 155 


dependent upon the use of these tools would be inhibited, even tliwarted, 
from the startd^^ 

If required to obtain a Rule 41 warrant for compelled disclosures of 
location information, the government would need to establish probable cause 
to believe that the location information itself is evidence of a crimed^^ In 
some instances, the location of a cell phone, insofar as it reveals a suspect’s 
location, would qualify as evidence of a crime. Txacation information, for 
example, may rebut a defendant’s alibi, place a defendant at tlic scene of a 
crime, or show that a defendant’s movements are consistent witli activities or 
overt acts alleged in furtherance of a criminal conspiracy. 

But not every use of location information by law enforcement easily tits 
into the “evidence of a crime” element of Rule 41. If, for example, a person 
has committed a crime in the past, her current location may not be evidence 
ot a crime, yet there might exist circumstances in which law enforcement has 
a legitimate need to find her.^'’"* If law enforcement has evidence to suggest 
that a person is about to commit a crime, her current location or prospective 
location leading up to the commission of that crime may or may' not, itself, 
be evidence of a crime, yet our society' generally accepts that law enforcement 
has a legitimate need to prevent her from committing a crime. Indeed, when 
addressing the DDP proposal that a probable cause warrant should be 
required for law enforcement access to all location data. Professor Kerr 
posed the question, “probable cause of Is it “probable cause to 

believ'e die person tracked is guilty of a crime” or “probable cause to believe 
the evidence of location information obtained w'ould itself he. evidence of a 
crime?”^”'' Professor Kerr noted that the difference is important because, in 
die case of a search warrant, probable cause generally refers to probable 


152. We do not claim to know, nor are we able to anticipate, all of tlie ways in which law 
enforcement uses prospective and historical location information in investigations. 

153. See In re Application of the IJ.S. for an Order Authorizing the Release of Prospective 
Cell Site Info., 4ft7 F. Supp. 2d 134, 135 (D.D.C. 2006) (explaining the difference between 
tlic D Order standard and probable cause as being that the latter requires a finding that there 
is probable cause to believe that the information sought is itself evidence of a crime rather 
than reasonable grounds to believe that the iiifomiation sought is relevant and material to an 
ongoing investigation). 

154. Some courts, however, have constnied die probable cause requirement more 
broadly with respect to tracking devices or cell site data. See, e.^., In re Application of the 
United States for and [sicj Order: (1) Authorizing the Use of a Pen Register and I rap and 
Trace Device; (2) Authorizing Release of Subscriber and Other Info.; and (3) Authorizing 
tlic Disclosure of Location-Based Servs., 727 F. Supp. 2d 571, 581-82 (W.D. Tex. 2010). 

155. House judiciary 201 0 ECPA Pjcfom Hearing s/rpra note 18, at 39 (written statement of 
Prof. Orin S. Kerr, Tlie George Washington Univ. Law Sch.). 

156. Id. 
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cause to believe that the information sought is evidence of a crime/'"'’ 
Cell phone location data will be evidence of a crime in only certain kinds of 
cases and will not nonnally be evidence of a crime when investigators need 
to learn die current location ot someone who committed a past enme/^'’ 

Magistrate Judge Susan K. Gauvey amplified this analysis in a recent 
decision when she concluded tliat a probable cause search warrant does not 
permit law enforcement to acquire GPS location information solely to 
execute an arrest warrant/^'' Specifically, the court noted that the 
government’s “probable cause” tiieory for obtaining the GPS location data 
to locate the subject of the arrest warrant w^as that the “evidence sought will 
aid in a partiailar apprehension,” not that it was evidence of a crime itself/'’” 
The government’s request was for “broad information coneeming [a] 
defendant’s ongoing location” wdth no alleged relationship whatsoever 
betv'een the “defendant’s ongoing movements and his crime.” ' The court 
therefore reasoned that, because the government had not established the 
“requisite nexus between the information sought and the alleged enme, no 
search w^arrant may issue” for the location data."”” 

Moreover, in certain circumstances, law enforcement may compel 
historical location information to e>:cbide someone from a criminal 
investigation. Tn that instance, the location information would not, under any' 
reasonable stretch of Rule 41, be evidence of a crime but rather would serve 
tire important function of “clearing” someone of criminal activity. Clearing a 
suspect would thus prevent further investigation, potentially avoiding a 
needless expenditure of government resources and a gratuitous government 
intrusion into his lite by focusing the investigation more accurately upon the 
true perpetrator. These are just a few examples of how the “evidence of a 
crime” element of Rule 41 may not encompass important law enforcement 
investigative activities. To the extent that good policy may dictate a probable 
cause standard for location information, that standard would need to 
accommodate die diverse, legitimate uses of location infonnation by law 
enforcement. 


157. IT 
1.58. Id. 

159. hi re Application of tlie U.S. for an Order Authorizing Disclosure of Location info, 
of a Specified Wireless Tel., No. 10-2188, 2011 U.S. Dist. LEXIS 85638 (D. Md. Aug. 3, 
2011 ). 

160. Id. at 93. 

161. Id. at 105. 

162. Jd. 
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IV. LESSONS LEARNED 

In 2010, the House Judieiarjr Subcommittee on the Constitution, Civil 
Rights, and Civil Liberties held diree LCPA reform hearings (widi Stephanie 
serving as lead counsel). The second of those hearings, and the most 
challenging to conceive and execute, explored issues pertaining to law 
enforcement access of location data (Location Hearing) The hearing 
focused on supplying members of Congress witii tire knowledge necessar)' to 
clarify or propose new? law enforcement access standards for location 
information.^'*^ 

Some of the challenges Stephanie encountered in developing this hearing 
stemmed from factual and policy questions and quandaries that continue to 
inform the search for reasonable access standards and odier reforms tliat will 
strike die right balance among die interests of law enforcement, consumer 
privacy, and industry. This Part discusses these challenges, which now 
morivatc and shape the recommendations for the policy framework 
presented later in this Article. 

A. Acquiring Facts To Malt, Good Policy Is Ditficui.t 

Location technology and tire uncertain legal landscape governing law 
enforcement access to location information are complex subjects. As witli 
most complicated issues. Congress needs information from all 
stakeholders — in this case from law enforcement, consumer privacy and civil 
liberties advmcacy groups, and industry representatives — to judge die relative 
necessity for legislative action and discern the best directions for policy. 
When compared, however, with other new technologies prompting 
Subcommittee consideration of ECPA reform, such as cloud computing, the 
subject of location-based information and services inspires an unusual degree 
of secrecy on the part of both industry' and law enforcement. 

At a later Subcommittee ECPA reform hearing focused on cloud 
computing, five major cloud computing companies testified.*® Industry' 
testimony included explanations of business models and services offered by 
tile various cloud companies and a discussion about how current ECPA 
standards are often difficult to apply to cloud services like Google Docs and 


16.A. See Lncation Hearing, supra noie, 19. 

164. See id. 

165. See generally ECPA Reform and the Revolution in Cloud Based Computing: Hearing Before the 
S ubcomm. on the Constitution, Chil Rights, and Civil Liberties of the H. Comm, on the Judiciary, 1 1 1 tli 
Cong. (2010) ILcrcinaftcr Cloud Based Computing HeatinsJ, available a/ http:/ /judidary'.housc. 
gpv/hearmgs/printers/lllth/lll-149_58409.PDF. Industry witnesses included representatives 
Lorn Google, Microsoft, Salesforce, Rackspace, and Amazon. 
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Google Calendar/'*'* Moreover, some of tliese companies asserted that weak 
RCPA privacy protections for information stored “in the cloud,” versus the 
full Fourth Amendment protections afforded information stored on personal 
laptops, limits die expansion of die cloud market, particularly to foreign 
customers who are concerned that the U.S. government has overly broad 
access to cloud-stored information. 

In contrast to that very public cloud computing disaission, no wireless 
earners or odier providers of location-based services to consumers testified 
at die location hearing. VCdiile industry^ witnesses willingly discussed details 
about cloud-based services, as well as die challenges die law presents for die 
industry’s compliance with law enforcement requests for information stored 
in the cloud, no similar public discussion occurred vis-a-vis law enforcement 
requests for location information or die types of location information 
carriers collect and retain. 

Law enforcement is equally reticent to discuss publicly the investigative 
practices and processes they employ to obtain location information. WEile 
they willingly talk about how cndcal location information is for a variety of 
enforcement responsibilities,^^'* they will confirm only very general 
information about the acquisition and uses of the location data. Of course, 
w'hen overly detailed information about sources and methods becomes 
public, these sources and mctiiods may cease to be useful investigative 
tools. But, unlike Wiretaps or Pen/Trap surveillance. Congress does not 
even have a sense of die number and scope of law' enforcement requests for 


166. See id. at 20 (statement of Richard Salgado, Senior Coiuisel, Law Enforcement & 
Info. Sec., Google Inc.). 

167. See id. at 40 (testimonv of David Schelhase, Exec, Vice President & Gen. Coimsel, 
Sfllesforce.com) (explaining that enstomers considering storing their information in the cloud 
want assurances that the U.S. government will not access their data without appropriate due 
process). 

168. See Senate Judiciary 201 1 ECPyl Hearing, supra note 7, at 5 (testimony of James A. 
Baker); see also Eocation Hearing, srpra note 19, at 60—61 (written statement of Richard 
Littlehale, Assistant Special Agent in Qiarge, Technical Servs. Unit, Temi. Bureau of 
Investigation) (describing how ceil phone location infomiation ftequendy pemiits law 
enforcement an opportunity' to iind and rescue a victim or apprehend an offender in a 
matter of hours). 

169. We are not in a position to assess all of the circumstances where location 
mformation as an uivestigative tool could become less useful to law' enforcement upon more 
disclosure about the method and frequency of this tool. We do note, however, that 
cellphones are increasingly becoming a necessary tool for society', and as a result, it is 
extremely difficult to avoid the possibility of location sun'eillance w'ithout turning off a 
phone, and losing all die benefits of diat technology'. 
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location information, statistics tliat would not necessarily require tlie 
exposure of detailed sources and methods.'''’ 

WTiile we can debate the motivations for the lack of detailed information 
in the public record about industry and law enforcement praetices pertaining 
to location information, at the end of die da)y Congress needs 
comprehensive information to legislate good policy. For both Wiretap and 
Pen/Trap authorities, for example. Congress mandated annual Wiretap and 
Pen/Trap reports, recognizing the need for accurate reporting on law 
enforcement’s use of diese tools. As Senator Patrick Lealiy has stated, 
reporting requirements are a “far more reliable basis than anecdotal evidence 
on which to assess law enforcement needs and make sensible policy in this 
area,”''^ as well as providing some degree of transparency and oversight of 
diese surveillance powers.'’’’ No reporting requirements currendy exist for 
location information.' Back in 2000, however, the Republican-controlled 
House Judiciary Committee proposed legislation concerning law 
enforcement access standards for prospective location information.'' This 
bill included new reporting requirements diat would have given Congress 
some sense of the scale of lav? enforcement compelled disclosures, as well as 
the number of people whose data was provided to law enforcement.'’’’ The 


170. Set gemr ally Christopher Soghoiaii, The Law Enforcement SurveillaiTce Reporting 
Gap (Apr. 10, 2011) (unpublished iiianusciipt), availahh i^http:/ / ssm.com/abstract=1806628. 

171. See 18 U.S.C. § 2519(2)— (3) (2010) (outlining what the intercepted communications 
report issued by the Administrative Office of the United States Courts must contain). These 
reports are detailed, revealing for each wiretap the city or county where it was executed, the 
tvpe of interception (phone, computer, pager, fax), the number of individuals whose 
communications were intercepted, the number of intercepted messages, the number of 
arrests and convictions that resulted from interception, as well as the financial cost of the 
wiretap. See also id. § 3126. 

172. 145 Cong. REC. 30,868 (1999) (statement of Sen. Lealiy). 

173. S. Rkp. No. 90-1097, at 79 (1968), repnntediri 1968 U.S.CC.A.N. 2112, 2196 (“[The 
wiretap reports] are intended to form the basis for a public, evaluation of its operation. The 
reports are not intended to include confidential material. They should be statistical in 
character. . . . [They] will assure the community that tlie system of court order electronic 
surveillance envisioned by the proposed chapter is properly administered and will provide a 
basis for evaluating its operation.”). 

174. See Soglioian, sifprawott 170, at 22. 

1 75. See Electronic' Commimwations Privacy Act of 2000, Digital Privacy Act of 2000 and Notice of 
Electronic Monitoring Act: Hearing Befare the Subcomm. on the Constitution, Ciml Rights, and Civil 
Liberties of the H. Comm, on the judiciay, 106th Cong. (2000) [hereinafter House Judiciary 2000 
ECPA Hearing. 

176. See Digital Privacy Act, H.R. 4987, 106th Cong. (2000). While the DOJ opposed 
tlic particular formulation of these reporting requirements because they were overly 
burdensome, they could be structured to be less onerous on investigators and prosecutors. 
See House Judiciay 2000 ECPA Hearing s/pra nott 175, at 51 (statement of Kevin DiGregoiy^, 
Deputy Assoc. Attorney Gen., Dep’t of lustice) 4‘[T]lie imposition of such extensive 
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bill did not become law and now, more than ten years later. Congress has 
little more information than it did in 2000d’^ 

B. 'i'HE Singular Advocacy Focus ox Law Enforcement 
Standards Has Narrowdd a Discussion That Should 
Include Minimization and Other “Dowtcstream” 

Privacy Protections 

The advocacy regarding the appropriate standard for law enforcement 
access to location information has largely focused on the DDP Coalition 
principle calling tor a Rule 41 probable cause requirement for all law 
enforcement compelled disclosures of location infonnation (historical and 
prospective, regardless of accuracy).'"'' This unitary standard, however, is a 
“non-starter” for law enforcement insofar as it will unduly limit the 
acquisition of non-content information at the early stages of an invcsrigation 
and will likely prohibit some basic investigative uses of location 
information.'''’ Indeed, it is one side of what has appeared to become a ratlier 
intractable stalemate. 

The singular advocacy focus on a “high” law enforcement access 
standard unduly limited a discussion of other downstream, post collection 
privacy protections, which wvre neither included in the DDP proposal nor 
adequately considered publicly. Such additional protections are a significant 
component, along with reasonable access standards, in the broader privacy 
framework proposed in Part VI. Such measures, mandated by Congress for 
other surveillance autliorities, include: minimization, a process by which 
information not relevant to tlie investigation is purged from law' enforcement 
databases;'*'’ notice to individuals whose location information has been 
disclosed to law enforcement at a time that does not hamt an ongoing 
investigation;'*' and the publication of statistical reports on law' enforcement 
use of location surveillance authorities.'*’ These sorts of protections are one 


reporting requirements for cyber-crime investigators would come at a time when law' 
enforcement authorities are strapped for resources to hght cyber-crime. The reporting 
requirements for wiretaps, while extensive, are less onerous because law enforcement applies 
for such orders relatively rarely. Extending such requirements to orders used to obtain mete 
transactional data w'Oiild dramatically liinder efforts to fight cyber-crime, such as die 
distribution of child pornography and Internet fraud.”). 

177. See Soghoian, supra note 170, at 23. 

178. See Our Principles, sipra note 22. 

179. See sipra Part III. 

180. See 18 U.S.C. § 2518(5) (2010); 50 U.S.C. § 1804(a)(5) (2009); id. § 1861(b)(2)(B). 

181. See 18 U.S.C § 2518(8)(d) (1998). 

182. See 18 U.S.C § 2519 (2010). 
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way to balance or offset access standards autliorizing broader law 
enforcement collection of data. 

C. 'i'HE Polarized Views of Law Enforcemext .-ind Privacy 
Advocates ALake Consensus Building Difficult 

It is not particularly insightful to observe that when one side of a debate 
starts from a position that is completely unworkable for die odier side and 
will not move, it is difficult to build consensus. If, at die end of the day, the 
only standard for location data that is acceptable to pnvacy advocates is a 
Rule 41 probable cause standard, then they nsk letting die proverbial perfect 
be the enemy of the good. The advocacy message tor overall ECPA 
reform — while supported through industry participation in die DDP 
Coalition and echoed by strong industry voices outside of the coalition 
calling for Congress to enact clear legal rules and shelter industry from 
liability — -was driven primarily by privacy advocates, 'i'hus, the burden to 
suggest new, workable, and more privacy-protective standards falls primarily 
on the shoulders of the community of privacy advocates. This is not an area 
where law enforcement will likely act as a willing catalyst for new access 
standards tliat place restrictions on their own investigative tools in the name 
of better privacy protections, even if diey are prepared to agree to a fair 
compromise in the end. Moreover, law enforcement has strong advocates in 
Congress who will fight against overly broad proposals to restnet 
investigatme audiorities. Consider, for example, the opening statement by 
dien Ranking Alember Sensenbrenner (now Chairman of die House Judiciary 
Subcommittee on Crime, Terrorism, and ITomeland Security and author of 
the USA PATRIOT Act) at the Location Hearing. Having clearly read the 
proposal for a unitary^ probable cause standard, die Ranking Member 
announced, “Wliile there may very well be a need to clear up the confusion 
in the area of obtaining prospective cell site information, it does not 
ncccssanly follow that the appropriate remedy to any ambiguity would be a 
Rule 41 search warrant based upon probable cause. 

Notwithstanding such strong allies in Congress, however, the DOJ 
should carefulljr measure the practical impact of Jofies. WTiile Jones does not 
hold that a wurrant is required for the installation and use of a GPS tracking 
device,^*"* a prudent prosecutor interested in ensuring that GPS tracking 


183. location Htaring, supra note 19, at 3 (opening statement of ranking member Rep. Jim 
Sensenbrenner). 

184. The Giurt dccHncd to reach the question of whether a warrant is required to install 
a GPS device. See United States v. Jones, 132 S. Ct. 945, 954 (2012) (“The Government 
argues in the alternative tlrat even if the attachment and use of the device was a search, it was 
reasonable — and dins lawEil under the Fourtli ,Anieiidnieiit because ‘officers had 
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evidence is admissible at trial would, absent further judicial or congressional 
guidance, be wise to obtain one in every instance. Only time will tell whether 
this new strategic necessity will have a measurable adverse impact on law 
enforcement investigations. 

A more urgent concern for the DOJ, however, should be die direat of 
continued judicial application and expansion of die mosaic theory^ inspired by 
the signals in the Jones concurrences. The signals in the Jones concurrences 
indicate that a majority of the Court could, in the future, incorporate some 
version of die theory into its Fourth Amendment jurisprudence. As ive have 
seen, absent clear congressional guidance regarding standards for law 
enforcement access to location data, some courts are already applying the 
mosaic theory^ to government applications for historical cell location data 
widi vraryang interpretations about how much data forms a mosaic and 
triggers a Fourth Amendment issue. Justice Alito’s answer for how to deal 
with the thorny line drawing problem under a theory that does not define 
when the mosaic materializes is simple: “where uncertainty exists with 
respect to whether a certain penod of GPS sunreillance is long enough to 
constitute a Fourtii Amendment Search, police may always seek a warrant.”^“ 
But this simple dictate is hardly a viable one for law enforcement in evmry' 
instance.^**' If tlie DOJ finds this potential reality to be unworkable and 
hannful to future law enforcement investigations (as it has suggested in 
congressional testimony),^*® it should engage earnestly in the legislative 
process and be prepared to agree to some reasonable additional privacy 
protections. Indeed, the prospect of a majority that wmuld make the mosaic 


reasonable suspicion, and indeed probable cause, to believe that [Jones] was a leader in a 
large-scale cocaine distribution conspiracy.’ We have no occasion to consider this argument. 
The Government did not raise it below, and the D.C. Qrcuit therefore did not address it.” 
(citation omitted)); see also Orin S. Kerr, What Jones Does Not Hold^ VOLOIOI Conspiracy 
(Jan. 23, 2012), avdlabk al http:/ /volokh.com/2012/01/23/what-jones-does-not-hold/ (“[VCJe 
actually don’t yet know if a warrant is required to install a GPS device; we just know tliat the 
installation of the device is a Fourth Aniendmeiit ‘seardi.’ ”). 

185. See supra Section III.D.2.b. 

186. jams, 132 S. Gt. at 964 (iMito, ]., concurring. 

187. Section II1.A.3. 

188. See Senate Judiciary 2011 ECPA Hearing, supra note 7, at 5 (testimony of James A. 
Baker, Assoc. Deputy Attorney Gen., U.S. Dep’t of Justice) (“If an amendment [to ECPA] 
were to unduly restrict the ability of law enforcement to quickly and efficiently determine the 
general location of a terrorist, kidnapper, cliild predator, computer hacker or other 
dang-eroLis criminal, it would have a very real and ver^^ human cost.”). 
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tlieory the law of tlie land should concentrate tlie Department’s mind 
wonderfully upon resolving this issue through the legislative process.'®' 

V. WHAT IS THE HARM, AND WHO CAN ADDRESS IT 
MOST EFFECTIVELY? 

In proposing tliat Congress reform existing location privacy law, we 
confront a logical threshold question: just what harms would we seek to 
prevent? W’hen it first enacted the Electronic Communications Privacy Act 
back in 1986, Congress sought to reestablish tlie balance of interests between 
law enforcement and privacy'^” that had been upset — to the detriment of 
privacy — by advances in wireless and computing technologies.’’” Congress 
also recognized that consumers might not embrace new technologies if 
privacy interests were not appropnately protected.'”" As technology 
continues to develop — simultaneously enriching our lives and facilitating 
more prevalent government (and private) surveillance — Congress, once 
again, is preparing to confront the task of establishing an appropriate balance 
among stakeholder equities,'”'’ which prompts us, yet again, to ask this 
threshold question. 

In recent years, prominent judges have, in written opinions, described 
and voiced concern over the harms associated with modern location tracking 
technologies. In doing so, they have suggested that Congress, not the 
judiciary, might be in die best position to provide appropriate incentives and 


iy9. “Depend upon it. Sir, when a man knows he is to be hanged in a fortnight, it 
concentrates his mind wonderfully.” lAMES BOSWELL, LIFE OF JOHNSON 849 (Oxford Univ. 
Press 1960) (1791). 

190. See Home Jmi'aaij 2010 ECPA Skefomi Hearing supra note 18, at 8—9 (written 
statement of Tames X. Dempsey, 'Vice President for Pub. PoHcyy Ctr. for Democracy & 
Tech.) (discussing balance of interests Congress sought to strike in enacting TCP A). 

191. Among the developments noted bv Congress were “large-scale electronic mail 
operations, cellular and cordless phones, paging devices, miniaturized transmitters for radio 
surveillance, and a dazzhng array of digitized networks . . . .” H.R. Rep. No. 99-647, at 18 
(1986). Privacy, Congress concluded, w'as in danger of being gradually diminished as 
tedinulogy advanced. S. Rep. No. 99-541, at 2—3, 5 (1986); see also H.R. Rep. No. 99-647, at 18 
(stating that “legal protection against the unreasonable use of newer surveillance techniques 
has not kept pace witli technology’)). 

192. See S. REP. No. 99-541, at 5 (noting dial legal uncertainty' over the privacy status of 
new' foi-ms of communications “may unnecessarily discouragp potential customers from 
using mnovative communications systems”); see also ti.R. Rep. No. 99-647, at 19 (noting that 
legal uncertainty over confidentiality “may unnecessarily discourage potential customers 
from using . . . [new] systems”). 

193. As of the writing of this Article, five separate hearings on ECPA reform were held 
during the 111th and 112th sessions of Congress (three hearings held in the House Judiciary' 
Conuiiittee and two hearings in die Senate Judiciary' Committee). 
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remedies. We take our cue from these judges and tlieir stated concerns to 
identify potential harms Congress should consider when it evaluates the 
relative necessity for legislative aetion and diseerns die best policy 
direcdoii.'” 

A. Thr Gow.rnmrxt’.s G a7.r and thr Panoptic Errrct 

As we shall see, some judges who have considered cases involving law 
enforcement access to location data posit tliat tlie persistent gaze of 
government may itself represent an objective harm to the public.'''” Tn doing 
so, these judges have alluded to surveillance tlicones found in literature, 
social tlieory, and philosophy. To evaluate and discuss their conclusions fully, 
we must briefly describe some of that material and how it appears, directly or 
allusively, in their opinions. 

Tate eighteenth-century theories of surveillance as an instalment to 
administer diseipline and cnforec soeial control, such as Jeremy Bentham’s 
“Panopticon” prison architecture,"'^’ suggest tliat die potency of the 
government’s gaze is such that, when imposed strategically and with 
suggested if not actual universality and constancy, it becomes internalized in 
the very minds of those subjected to its influence as a mechanism of 
rehabilitadve discipline.'''^ Moreover, Bendiam envisioned the I^anopticon’s 
design as appropriate not only to prisons, but to any environment where 
enhanced discipline is desired: schools, asylums, factories, and more. In 
short, for Bcntham, die panoptic gaze of die state could serve as a secular 
version of die all-seeing eye of die Judeo-Christtan God, and the normative 
behavioral conformity religious conscience once inspired would be supplanted 
on more certain ground by the discipline this modem gaze could inspire. 

The twentieth-century French social theorist Michel Foucault rigorously 
analyzed Bcntiiam’s project in die Panopticon and expanded it into an 
interpretive metaphor for coercive social power, i'oucault examines 
“Panopticism” as an instance of modem society’s ability to compel 


194. \TTiat follows in this Section is not an attempt to describe an authoritative legal or 
philosophical theory^ of the harms inherent in unjustified disclosure of location data, though 
we shall have occasion to allude to law, philosophy, and literature in service of die task of 
describing diose hamis as expressed by judges who have confronted diem and chosen to 
discuss diem in recent opinions. 

19.S. See United .States v. (iuevas-Perez, 640 F..id 272, 2S.S (7th (iir. 2011) (Flaum, |., 
concurring) (“The constitutional ill of prolonged or mass use of GPS technology would not 
necessarily be based on the information acquired by the device but on the fact of the 
government’s gaze.”). 

196. See JEREMY Bentilam, The Panopticon Writings 29-95 (TVliran Bozovic ed., 
1995) (1787).' 

197. U 
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compliance with its approved behavioral norms tlirough its institutions and 
their various discourses/^* The presence of modern sunreillance mechanisms, 
visible and imperceptible, public and pnvate, promotes die “Panoptic 
effect” — a general sense ot being omnisciently observed. The state may 
choose to deploy this effect to amplify and mystify the power of its own 
“gaze” as a coercive instmment, and to promote the intemaliaation of that 
gaze in the service of disciplinc.^^^ 

Bentham’s plan for die Panopticon was fairly simple: a model prison 
consisting ot a central tower surrounded by a ring of prison cells, each of 
tiiem backlit, so that anyone in tlie tower could see all of the prisoners at 
once. Bentham posited that a single inspector in the tower could control the 
behavior of all of the prisoners through making each prisoner “always feel 
tiiemselves as if under inspection, at least as standing a great chance of being 
so.” Eventually, since tiae backlit cells and tlie tower structure made it 
impossible for prisoners to observe him, the monitor in the tower would 
actually become superfluous and the inmates, having internalized the 
presumption of his continued surveillance, would literally ivatch themselves. 


198. See Michel Foucault, Discipline & Punish: The Birth of the Prison 195- 
228 (1978). Discourse m this case docs not refer merely to the word’s common denotation 
as written or spoken communication or debate, but to the word as used in modem social 
dieory, particularly die work of Foucault, refeiTiiig to the various systems of linguistic usages 
associated with complex social practices (e.g., law, medicine, religion) deployred as 
mstruments of social power, particularly the power of the state. See generallj Michel 
Foucault, The Order of Things (1970); Michel Foucault, 1'he Archeology of 

Knov:t,EDGE (1972). For an extended discussion of the diffuse nature of power in society 
and the role this concept of discourse play's in analy'zing how ideas and language encode 
power in social spaces and, therefore, have the potential to play a role in historical change, 
see Michel Foucault, Tmo Lectures, in Power/ Knowledge: Selected Interviews & 
Other WRITINGS 78 (Colin Gordon ed., 1980). 

199. It is important to note that more recent ivnters on ^’siiiv'eillance theory” have 
qualified Bentham and Foucault usefully. See, e.g., GlI.I.KS Dki.KL/.K, Pos'I'SCRIFT ON THE 
Societies of Control .5—7 (1992) (distinguishmg Foucault’s “disciplinary” society from 
his own “control” society in critique of the Panopticon); David Lyon, THEORIZING 
Surveillance: The Panopticon and Beyond (2006); David Ly'on, Surveillance 
Studies: An Overview 54—62 (2007) (summarizing contemporary criticism qualifying the 
application of Foucault’s analysis to contemporary surv'eiUance). Wliile die rigor and depdi 
of recent surveillance theory is indispensible background to anyone who w'Oiild consider 
surveillance in all its proftindify, its presence in legal opinions to date, wliich is the focus in 
tliis Article, has been predominantly restricted to metaphorical allusions to Orw'ell’s dystopia 
in 1984 and some consideration of the government’s “gaze” as discussed in Foucault’s 
mterpretation of the Panopticon. Since diese interpretive frames are effectively canonical 
and, as such, disseminated commonly enough to drive judicial decision making as well as the 
appeal by the judiciary for legislation in this area, we place our owm main focus on them at 
diis moment in the policy debate. 

200. Jeremy Ben diani. Letter V : Lssential Points of the Plan, in Bentham, r/tyranote 196. 
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Foucault claimed tins internalization of surveillance made the Panopticon a 
quintessential figure for a peculiarly modern and secular form of state power 
that arose in die Enlightenment, “a new mode of obtaining power of mind 
over mind, in a quantity hitlierto witiiout example. 

As modern location surveillance teclmiques increase in precision and 
tiieir pervasive distribution tiiroughout society becomes known, though tiie 
instmments themselves may or may not remain invisible, people become 
increasingly aware of, and potentially influenced by, a palpable sense of the 
omniscient gaze similar to that produced by Bentham’s prison design. 

Consider, for example, that through the use of modern surveillance 
technologies, a single police officer can now monitor the movement of tens, 
even hundreds, of targets from the comfort of her desk"’’" and, because there 
IS no statutory notice provided to those under such surveillance, targets have 
no way' of knowing if and when they are being or have been watched.*”^ 
kXdiile suri'eillance has traditionally' been very expensive in terms of human 
resources (often requiring multiple shifts of agents to watch a single target 
for a twenty-four-hour period), the ubiquity of cellular phones and 
innovations in GPS tracking technology' has made surveillance easier, 
cheaper, and consequently more prevalent."™ A law enforcement agency’s 
gaze is no longer limited by the number of agents available to driv'e around a 
city, but only by tiic amount of money available in its budget to pay wireless 
earners for tlieir assistance, or to purchase GPS tracking devices or otlier 
similar technologies.*'^ Aloreover, although such surveillance is supposed to 


201. JJ. at Preface. 

202. United States v. Pineda-Moreno, 617 F.3d 1120, 1124 (9th Cir. 2010) (Kozinski, |., 
dissenting from denial of rehearing en banc). 

203. See Appeal of Jn re W'.D. Va. Application, 620 F.3d 304, 317 (3d Cir. 2010) (noting dial 
“it IS unlikely' that cell phone customers are aware that their cell phone providers colhet and 
store historical location infnrmation''q. 

204. See United States v. Ciarcia, 474 F.3d 994, 998 (7th (dr. 2007) (“The new 
[sunreillance] technologies enable, as the old (because of expense) do not, wholesale 
surveillance. . . . Technological progress poses a threat to privacy by enabling an extent of 
surveillance that in earlier times would have been prohibitively' expensive.”). 

205. Christopher Soghoian, An End to Vrivaty Theater: Exposins, and Discouraging Corporate 
Disclosure of User Data to the Government, 12 MiNN. J.L. Set. & Tech. 191, 222—23 (2011). 
(“Many telecommunications companies and ISPs seek and typically receive payunent from 
government agencies for the surveillance services they provide, a practice that the law often 
permits.”). The cost of location surveillance by some carriers appears to have plummeted 
over the past decade — a savings that they were obligated to pass on to law enforcement, 
tliough no pubhe data exists for comparison. For example, in 2003, Ncxtcl communications 
charged f 150 per “ping.” See NEXTEL, SUBPOENA & COURT ORDERS: NEXTEL’S GUIDE FOR 
Law Enforcement 6 (2003), available Iti http://info.publicintelligence.net/nextelsubpoena. 
pdf In 2009, it was revealed tliat law enforcement agencies had performed 8 million pings 
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be invisible, it is becoming more perceptible through media stories, making 
the fact of its pen^asive existence known, at least in an abstract senseh'^'^ This 
simultaneous visible and invisible presence of surveillance is precisely what 
produces tlie anxiety that is the foundation of die panoptic effecth'^^ These 
particular location technologies partake of a whole system of surveillance 
instmments and mechanisms, both governmental and private, which 
constmet and project the government’s gazeh'"'^ 

Echoing tlie conclusions hinted at by the history of surveillance, its 
coercive utility, and tlie rapid innovation in contemporary surveillance 
technology^, including geolocation systems, Se\*enth Circuit Judge Flaum, 
while criticizing the reasoning of Maynard in Cuems-Perey^, suggests that the 
fact of the ^‘government’s gaze” itself, as exerted by “mass use of GPS 


via a website created by Sprint/Nextel. See Pmeda-Morem, 617 F.3d at 1125 (Kozinski, 
dissenting from denial of rehearing en banc). Although we have no direct evidence to 
suggest that the carrier has reduced the cost of its pings (or moved to a fixed fee, ratiier than 
per-phig charges), even vdtliout adjusting for inflation, had Sprint charged ?150 for each of 
the 8 million pings, it would have made ^^.2 billion. Since law enforcement certain^ did not 
spend that much money for this purpose, some new h illin g arrangement must have 
motivated the increased activity level. 

206. See generally The Wire (HBO cable television senes, 2002-2008); see also Anders 
Albrechts lund. Surveillance and Ethics in Film: Rear Window andT]it Conversation, 15 j. Crim. 
Just. & Popular Culture, no. 2, 2008, at 129-44. 

207. Regarding the 'Taiioptic effect’' of tlie state’s gaze. Professor Daniel Solove points 
out tliat: 

AltliOLigh concealed spying is certainly deceptive . . . [i]t is tlie awareness 
tliac one is being watched that affects one’s freedom. ... A more 
compelling reason why cowrt surveillance is problematic is that it can still 
have a chilling effect on behavior. In fact, there can be a more widespread 
chilling effect when people are generally^ aware of the possibility^ of 
sunvillance but are never sure if they are being watched at any particular 
moment. 

Daniel Solove, Understanding Privacy 109 (2008). This is true, unequivocally, 
regarding the specular value of strategically displaying and withholding evidence of state 
power. Moreover, revelations of tlie covert commercial use of location-based tools, such as 
tlie recently divulged use of Apple’s iPhone and Google’s Android phones in WiFi niappmg, 
have tlie indirect effect of reinforcing tlie general sense of die state’s coercive gaze and its 
power to influence compliance with social norms, whether or not diere is any actual 
convergence of interest between the state and private actors in a given case. See Angwin & 
Valeiitino-Devries, supra noit 41. 

208. See Christopher Slobogin, Is the Fourth Amendment Kelevant in a Technologcal Agy>, 
Future Const. (Brookings Inst., Washington, D.C.), Dec. 8, 2010, available t/Zhttp:/ /www. 
brookings.edu/^/mcdia/Filcs/rc/papers/2U10/1208_4th_amcndment_slobogin/ 1208_4th 
_amendment_slobogin.pdf (describing die negative, real world impacts of survefllance even 
when die govenimeiit makes no use of the sur\^eillance product). 
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technolog}',” may represent a “constitutional ill” which amounts to a 
cogni?:able harm/"' 

Historical location information produced by mobile devices adds another 
layer of implication to the panoptic effect. Such information is, of course, a 
record of where we have been, 'ihese data are stored by companies providing 
wireless services to consumers and on mobile devices for periods of time 
unknown to the user since retention policies var}' by company.*^" Some 
companies may store more precise data than others,^” but through these data 
die government may get an accurate picture of most everywhere we have 
been.^ " Moreover, once information is disclosed, tlie government entities 
responsible for the investigation add it to databases and keep it for an 
indefinite period of rime."^^ In effect, modern location technology can give 
die government an increasingly perfect memory of our activities, thus making 
it impossible to escape one’s past. Data retention policy, at this point, might 
be considered a relatively unknown and thus “immature” source of panoptic 
power. We are only now beginning to learn the details and scope of the 
heretofore hidden commercial use of location data on smartphones,^^'' and 
Congress is currentiy considering data retention legislation that will require 
providers to store subscriber data for twelve months.*’'^ These developments 


209. United States v. Cuevas-Perez, 640 F.3d 272, 285 (7th Cir. 2011) (Flaum, 
concuning). 

210. Soghoian, si^ra note 205, at 210 (‘^[Vfjost technolog)^ providers and communications 
earners now have estahhshed data retention poheies that govern the length of time before 
which they will delete customer records, communications, logs, and other data. 
Unfortunately, outside of the search engine market, where pressure from European 
regulators has led to companies publicly touting their policies, few other firms will publicly 
reveal their own data retention rules.”). 

211. See 'Location Hearing, supra note 19, at 27 (written statement of Prof Matt Blaze, 
Uiiiv. of Pa.). 

212. See People yc WeaY-er, 12 N.Y.3d 433, 441—42 (2009) (describing the t^-pes of 
information that tracking decnces can record about an individuafs life). 

213. See generaltj Fred H. (iate. Government Data Alining: 7 he Heed for a Legal t’ramemrk, 43 
Hary. C.R.-C.L. L. Rev. 435 (2008). MoreoY-er, the data ofmnocent individuals who are not 
targets of government surveillance can get “swept up” by community of interest requests or 
other compelled disclosures of data that seek to discover ec^eryone who was at or near a 
particular location at a particular time. 

214. See jennifer Valentino-DeVries & Julia Aiigwin, Latest Treasure Is Location Data, 
Wall St. J. (May 10, 2011), http:/ / on.wsj.coni/xJGP9u (“Location infomiation is emerging 
as one of the hottest commodities in the tracking industry .... [T]he Journal’s ‘\X4iat Tliey 
Know’ series found that 47 of tlie 101 most popular smartphone apps sent location 
mformation to other companies.”). 

215. The Protecting Children 6:om Internet Pomographers Act of 2011 was favorably 
reported out of the House Judiciary Committee on July 28, 2011 and requires certain types 
of providers to retam some types of data for at least 12 raontlis. See H.R. 1981, 112th Cong. 

§ 4 (2011), availahk http://l.usa.gOY-/xeBBB6. 
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will inevitably lead to a broader public discussion of both the commercial and 
law enforcement uses of historical location data. These discussions will 
ostensibly be conducted in the name of protecting the public from the 
government’s intmsive eye, which will serve ironically' to enhance its power 
to reinforce the panoptic effect. 

More than forty years ago. Vice President Hubert Humphrey observed 
that “[w]e act differently if we believe we are being obsenred. Tf we can never 
be sure whetlrcr or not we arc being watched and listened to, all our actions 
will be altered and our very character will change.^“ Justice Douglas made die 
same point a few y^ears later, observing that “[mjonitoring, if prevalent, 
certainly kills free discourse . . . Humphrey and Douglas both andcipate 
Foucault in their conclusions in describing the effect of being observed. To 
diese men, one of politics, the other of law, the observing gaze of the state 
was, intuitively, a powerfully coercive force that changes people, as surely and 
utterly as the Medusa’s gaze was said to change men to stone. 

The ever-improving accuracy of location technology has given the 
government’s gaze a degree of clarity hitherto undreamed of, except perhaps 
in dystopian novels such as Orwell’s 1984. Notably, as tiiey' confront the 
powerful gaze of modern surveillance technologies, judges around the 
country' are voicing their own anxiety regarding the impact of this technology 
on individuals and society, often turning to sources like Orwell to illustrate 
their conclusions. In People v. Weaver, a case about a GPS tracking device 
placed on a car. Judge Lippman expressed his concern over the very personal 
profile of an individual’s life captured by tracking technologies: 

The whole of a person’s progress through the world, into botir 
public and private spatial spheres, can be charted and recorded 
over lengthy periods possibly limited only by the need to change 
tire transmitting unit’s batteries. Disclosed in tire data retrieved 
from tire transmitting unit, nearly instantaneously with tire press of 
a button on tire higlily portable receiving runt, wiU be trips tire 
indisputably private nature of which takes little imagination to 
conjure: trips to the psychiatrist, tire plastic surgeon, the abortion 
clinic, tire AIDS treatment center, the strip club, tire criminal 
defense attorney, tire by'-tiie-hour motel, the ruiion meeting, tire 
mosque, synagogue or church, the gay bar and on and on. 'iX'hat the 
technology yields and records with breathtaking quality and 
quantity is a highly detailed profile, not simply of where we go, but 
by' easy inference, of our associations — apolitical, religious, amicable 
and amorous, to name only a few — and of the pattern of our 


216. Hubert H. Humphrey, Farmwd, in EDWARD V. LONG, The INTRUDERS, at vih (1967). 

217. United States v hvTiite, 401 LI.S. 745, 762 (1971). 
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professional and avocational pursuits. Wlien multiple GPS devices 
are utilized, even more precisely resolved inferences about our 
activities are possible. And, with GPS becoming an increasingly 
routine feature in cars and cell phones, it will be possible to tell 
from die technology with ever increasing precision who we are and 
are not with, when w'e are and ace not with them, and wliat we do 
and do not carry on our persons — to mention just a fetv of the 
higjily feasible empirical configurations."^* 

Likewise, in his dissent in United States v. VinedaSlorenoS'^^ a case where the 
Ninth Circuit rejected en banc review of a panel decision involving GPS 
tcchnolog)', the cvcr-witty""* Judge Kozinski turns deadly serious, invoking 
his own childhood in Communist Romania and alluding directly to the 
setting of i984 as he describes the tracking technolog)^ in question: 

T don’t think that most people in the United States w'ould agree 
widi the panel tliat someone who leaves his car parked in his 
driveway outside the door of his home invites people to crawd 
under it and attach a device tliat will track the vehicle’s every 
movement and transmit that information to total strangers. There 
is something creepy and un-Anerican about such clandestine and 
underhanded behavior. To those of us who have lived under a 
totalitarian regime, there is an eerie feeling of deja loi. This case, if 
any, deseni-es the comprehensive, mature and diverse consideration 
diat an en banc panel can provide. We are taking a giant leap into 
the unknown, and the consequences for ourselves and our children 
may be dire and irreversible. Some day, soon, w^e may wake up and 
find we’re living in Oceania."*^ 


218. People v. Weaver, 12 N.Y..7d 4.3.7, 441-42 (May 12, 2009). 

219. United States v. Pineda-Moreno, 617 F.3d 112C), 1121—26 (9th Cir. 2010) (Kozinski, 
T., dissenting &om denial of rehearing cn banc). 

220. In criticizing the underlying panel’s conclusion that the defendant has no 
expectation of privacy in his driveway. Judge Kozinski explains: 

The panel autlionzes pohee to do not only what invited strangers could, 
but also uninvited children — ^in tliis case crawl imder die car to retrieve a 
ball and tinker witli die undercarriage. But there's no limit to what 
neighborhood kids will do, given half a chance: They’ll jump die fence, 
craud under the porch, pick fruit from the trees, set fire to the cat and 
micturate on the azaleas. To say the poHce may do on your property^ what 
urchins might do speUs the end of Fourdi Amendment protecdons for 
most people’s curtilagp. 

Id. at 1123. 

221. Id. at 1126. Furdicr, the court in United Stales v. Sparks refused to find a Fourdi 
Amendment violation in the gpvemmcnfs use of GPS placed on the defendant’s vcliiclc 
trader the specific facts of the case, but it nonetheless acknowledged that the court “is not 
unsympadiedc to the sendmeiit expressed by Chief jusdee Kozinski and Ins Nindi Circuit 
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Judge Kozinski’s language echoes the disturbing uncertainty that results 
when the instruments of the state’s panoptic gaze become even partially 
visible. Indeed, as \vc have discussed, tlic very partial nature of their visibility 
IS essential to produce tlie uncertainty and anxiety of tlie panoptic effect. In 
response, Judge Kozinski appeals to a locus of greater authority, here an en 
banc panel of the Ninth Circuit, to assert the control (i.e., “comprehensive, 
mature and diverse eonsideration”) necessary to govern the state’s panoptie 
gaze in tlie name of presenung the specifically “American” way of life it 
seems to tlireaten. 

Judge Flaum, in his concurring opinion in Cuems-Pervz, goes further still, 
suggesting the government’s increasingly powerful and clear sense of sight 
with regard to the lives of individuals, using new, more accurate location 
technologies, might offend die f ourth Amendment in a manner explicitly 
proscribed by the Founders as it was being crafted: 

There may be a colorable argument . . . that the use of GPS 
technology to engage m long-term tracking is analogous to general 
warrants that the Fourth Amendment was designed to curtail, 
because of the technology’s potential to be used -arbitrarily or 
because it may alter the relationship behveen citizen and 
govermnent in a way that is inimical to democratic society. 


brethren, that tliere is sometliing ‘creepy’ about continuous surveillaiice by the government.” 
750 F. Supp. 2d 384, 395—96 (D. Mass. 2010). Wliile noting tliat “[a]dvances in tediiiology', 
like GPS devices, provide, neutral and credible evidence and thus facilitate the ultimate (and 
yet amorphous) goal of ‘justice,’ ” the court also recognizes that “it is easy to envision the 
worst-case OrweUian society, where all citizens are monitored by the Big Brother 
government.” Id. at 394—95; see also In re Application of the U.S. Authorizing the Release of 
Historic Cell-Site Info., 809 F. Supp. 2d 113, 127 (E.D.N.Y. 2011) (““While the government’s 
monitoring of our thoughts may be the archetypical OrweUian intrusion, the government’s 
surveillance of our movements over a considerable time period tlirough new technologies, 
such as tlie collection of cell-site-location records, widiout the protection of die Fourtii 
Aiiiendrnent, puts our county far closer to Oceania tlian our Constitution permits.”). 

222. l.Inited States v. Cuevas-Perez, 640 F.3d 272, 285 (7th Cir. 2011) (Flaum, J., 
concurring). In the same case, in her dissent. Judge Wood also appeals to Orwell for 
mterpretive audionty, with a sense of urgency matching that of judges Flaum and Kozinski: 
Hus case presents a critically unportaiit question about die govemmenfs 
ability^ constantly to monitor a person’s movements, on and off the public 
streets, for an open-ended period of time. The technological devices 
available for such monitoring have rapidly attained a degree of aecuraey 
that would have been unimaginable to an earlier generation. They make 
die system diat George Oravll depicted in his famous nov-el, 1984, seem 
cliiinsy and easily avoidable by comparison. 

Id. at 286 (AXAod.J., dissenting). 
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Judge FlaunTs concurrence strongly criticizes tlie reasoning of the Maynard 
couiT*'^ (the case concluding that United States v. Knotts^^"* does not govern 
prolonged GPS surveillance and instead applying a mosaic theory of tlic 
Fourtli Amendment), yet he seems to go out of his way to propose an 
alternative theory of the Fourth Amendment that might, perhaps, offer away 
to cabin or control the government’s prolonged use of GPS tracking. This 
palpable concern on the part of senior jurists from tv?o appellate courts is 
indicative of die general harm to society, to which all others are ancillary, 
created by location technology, and die Issues diis technology raises should 
be scrutinized accordingly. 

But where should one turn for sufficient authority? A Ninth Circuit en 
banc panel? How about the ultimate authority in the judicial branch: the 
Supreme Court of the United States? judge Flaum considers diat option 
briefly, perhaps aware of die government’s petition for certiorari in Maynard, 
later granted in Jones,"^^ in further reducing his argument to its bare bones: 
“on this view, the constitutional ill of prolonged or mass use of GPS 
technology would not necessarily be based on die information acquired by 
the device but on the fact of the government’s gaze.”^^'^ 

It may be tempting, as a judge on a federal appellate court, to urge the 
Supreme Court to employ the Fourth Amendment against the “ill” that can 
be inflicted by die mere “fact of the government’s gaze.” But Judge Flaum 
himself, having indulged in tiie i'burth Amendment argument and perhaps 
gauging the limited power of the judiciaty to use die common law in an 
effort to assert control of technology changing at the pace of Moore’s I.aw,^’ 
immediately wididraws it in favor of a legslative remedy: 


223. Id. at 280 (Flauin, J., concurring) (“Neitlier ot Maynard’s twin bases for ruling that 
die defendant had an objectively reasonable expectation of privacy is doctrinally sound — or 
all that workable as a practical matter.”). 

224. 460 Li.S. 276 (1983) (holding that a person does not have a reasonable expectation 
of privacy in movements from one place to another on public thoroughfares). 

225. See Petition for Writ of Certiorari, United States v. Jones, 132 S. Ct. 945 (2012) 
(No. 10-1259). 

226. Cmvas-Perey, 640 F.3d at 285 (7tli Cir. 2011) (Flaum, concurring). 

227. Moore’s law describes a long-tenii trend in the development of computer 
hardware, specifically tiiat die number of transistors that can be placed inexpensively on an 
integrated circuit doubles approximately every two years, resulting in a corresponding, 
rougjily exponential, increase in tlie capabilities of many digital devices — ^processors, 
computer mcmoiyy digital camera resolution, and more. Moore’s projected rate of grow^th, 
which is used in the semiconductor industry to guide long-term planning and to set targets 
for research and development, has continued for over fifty years and is expected to remain 
constant through at least 2015 or later. It was named for Gordon E. Moorv, the co-foundcr 
of Intel, who described tlie trend in a 1965 paper. Gorden E. Moore, Cramming Aimv 
Companents ontn Integrated Cinnits, 38 ELECTRONICS, no. 8, Apr. 19, 1965, avail-able at 
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Of course, the Supreme Court just last term reminded us tliat 
“[t]he judiciary risks error by elaborating too fully on the Fourth 
j\mendment implications of emerging technolog}' before its role in 
society has become clear.” Ci^ of Ontario v. Quon^ 1.30 S. Ct. 2619, 

2629 (2010). In light of Knott’s holding tm.d fJnoii’s admonition, it 
strikes me not so much as insufficiently circumspect as simply 
beyond our mandate to conclude tliat what is permissible when 
accomplished wtith a beeper is impermissible when accomplished 
wntli a GPS unit. I agree with tlie dissent, however, that nothing 
would preclude Congress from taking the important questions 
implicated by GPS technology and imposing answers. Indeed, die 
unsettled, evolving expectations in this realm, combined with the 
fast pace of technological change, may malee the legislature the 
branch of government that is best suited, and best simated, to act,'^'^® 

The Supreme Court has now decided Jones. Wliere do we find ourselves? 
The concurring opinions echo the concerns Judge Koxinski and Judge Flaum 
expressed. Justice Alito’s concurrence recognizes that law enforcement’s 
secret, long-term monitoring of every single movement of an individual’s car 
does not accord with society’s reasonable expectations of privacy.’^ Justice 
Sotomayor even quotes Judge Flaum’s concurrence in Cuenas-Peretr^ as she 
asserts: “GPS monitoring — by making available at a relatively low cost such a 
substantial quantum of intimate information about any person wtiiom the 
Government, in its unfettered discretion, chooses to track — may ‘alter the 
relationship between citizen and government in a way that is inimical to 
democratic society.’ 

The majority opinion, however, functions only to limit tlic scope of the 
“government’s gaze” with respect to the physical attachment and use of a 
GPS tracking device. Indeed, the majority’s definition of “search” does not 
apply to sihiations w'here the transmission of radio or other electronic signals 
IS not attained through the government’s physical attachment of a device by 
trespass. Moreover, |ustice Alito’s adoption of a mosaic-type theory' raises 


http:/ / dow'iiload.iiitel.com/museum/Moores_Law/Articles-Pi'esii_releases/Gordon_Moore_ 
1965_Artide.pdf. See generally Bob Sclialler, Tlie Benclimark of Progress in Semiconductor 
Electronics (Sept. 26, 1996) (unpublished paper), anailable at http://researcb.microsoft.com/ 
en-us/ um/ people /gray/Moore_Law.html. 

228. Cueva.e-Pereyy 640 F..3d at 28.6—86 (Haum, J., concurring) (citing Orin S. Kerr, 'L'he 
Fourth Amendment and Neue Technologies: Constitutional Myths and the Case for Caution, 102 Mich. 
L. Rev. 801, 805AI6 (2004) (arguing that Congress should be the primary' driver of privacy 
protections when technology “is in flux”)). 

229. Jones, 132 S. Ct. at 964 (Alito, f, concurring). 

230. Id. at 956 (Sotomayor, f, concurring) (quoting Cueras-Pereti, 640 F.3d at 285) 
(Haum, b, concurring)). 
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tlie same thorny line drawing issues presented by Alaynard.^'^ Perhaps 
recogni?;ing the limitations of this approach, justice Alito acknowledges that 
“[t]hc best wc can do in this case is to apply existing Fourdi Amendment 
doctrine and to ask whether die use of GPS tracking in a particular case 
involved a degree of intmsion that a reasonable person would not have 
anticipated. But like Judge Flaum, justice Alito recognises that “[i]n 
circumstances involving dramatic technological change, tlae best solution to 
privacy concerns may be legislative.’”^^ 

Certain judges and justices who have closely considered the implications 
of location technology have expressed concern, even anxietyy over the effects 
on society of the government’s use of location technologies. Some of these 
jurists have further questioned the law’s current ability to contain its effects 
and have found that ability, and hence tlieir own powers, wanting. We share 
the jurists’ skepticism. Cognizant of the power of the government’s gaze and 
in agreement with Justice iVlito’s’’'* and Judge Flaum’s conclusion that the 
legislature is likely the branch of government best suited to fashion the 
appropriate protections against tins gaze, we now present our model privacy 
framework for location information. 

VI. LEGISLATIVE PROPOSAL 

In an effort to try and bridge the gap betvreen the currently polanzed 
positions of privacy advocates and law enforcement, we offer a model 
privacy^ framework to govern law enforcement compelled disclosures of 
historical and prospective location information.’’’’ It is neither the most 


231. tyf jtyra Section III. B. 2. b. 

232. Jams, 132 S. Cl. at 964 (Alito, concurrinjri. Furtliennore, during tlie government’s 
oral argument in Jones, shortly following justice Breyer’s stated concern over “what ... a 
democratic, society [yy^ould] look like if a large number of people did think that the 
government was tracking their every movement owr long periods of time” and his search 
for a “reason and principle” that would “reject” this kmd of government suiveillance “but 
wouldn’t also reject [government tracking] 24 hours a day for 28 days,” justice ScaHa 
exclaimed, “Don’t wc have any legislatures out there that could stop tliis stufff” Transcript 
of Oral jtygument at 24—26, Jones, 132 S. Ct. 945 (2012) (No. 10-1259), available al http:// 
www.supremecourt.gov/oral_arguments/ argument_transcrijtts/10-125 9.pdf. 

233. Id. (citing Kerr, supra note 228, at 805-06). 

234. Justice Ginsburg, Justice Breyer, and Justice Kagan all signed Justice Alito’s 
concurrence regarding this conclusion. 

235. We intend the privacy framework and access standards proposed in tills Part only 
to apply to criminal law enfoivement autlionties. They are not intended to amend or affect 
mtclligcncc or national security authorities that the government may use to acquire location 
information. The gpvxmmcnfs use of such intelligence tools is beyond the scope of this 
Article. Any actual legislation tliat seeks only to amend criminal law enforcement authorities 
vvmuld include appropriate statutory language to exempt relevant intelligence audioiities. 
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friendly to law enforcement nor tlie most protective of privacy, but it is an 
attempt to find a reasonable balance among the interests of law enforcement, 
privacy, and industry. 

Our proposal relics on several overarching pnnciples that form a 
foundation for crafting the correct balance: a strong privacy framework that 
does not unduly limit law enforcement investigative activities or negatively 
affect industry' innovation. These principles are influenced by a vanety of 
sources including, but not limited to, ideas expressed by the DDP Coalition, 
otf-the-record discussions with industry representatives, intonnation revealed 
in public congressional hearings and elsewdaere in the public record, and 
extensive discussions with private practitioners, academics, and privacy 
advocates. 

A. OWEIOVRCHING PRINCIPLES 
'/. Clear ILuks 

Law enforcement, judges, and industry all benetit from clear access 
standards."'^^ When the F.CPA was passed in 1986, location data was not a 
“routine tool” used by law enforcement and cell phones were a luxury 
affordable to only a small number of people. Congress, understandably, did 
not have the clairvoy'ance to foresee the explosion in wireless mobile devices. 
Nor did Congress anticipate the confusion"^' that would ensue due to the 
lack of any clear guidance in the ECPA in the fomi of standards governing 
law’ enforcement compelled disclosures for prospective location information. 

In contrast to the uncertain, even chaotic, legal landscape that currently 
burdens the analysis of law enforcement access to location data, clear 
standards enable all stakeholders to exeaite their respective responsibilities 
certain in the knowledge that they are following the lawn For prosecutors and 
agents, this means they can efficiently get access to location information 
because they w'on’t have to “haggle” over the appropriate standard for access 
with certain judges. For magistrate judges, clear standards better enable them 
to ensure that tlic government follows the law in obtaining access to any 
location data. Moreover, industry can comply with the law wntliout mnning 


236. See (Comments of (TIA — Tlie Wireless Association, mpra note 46, at 16 (“The lack 
of a consistent legal standard for tracking a user’s location has made it difficult for carriers to 
comply' with location demands.”); Senate Judicial 201 1 ECPA Hearing, supra note 7, at 7 
(testimony of James A. Baker, Assoc. Deputy Attorney Gen., U.S. Dep’t of Justice); Location 
Hearing, supra note 19, at 85 (written statement of Judge Stephen Wm. Smith, U.S. Magistrate 
Judge). 

237. See supra Part III. 
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tlie current risk of incurring liability for inappropriately disclosing customer 
information to the government."^* 

Z Technology Neutrality 

In order for the ECPA to remain a “forward looking statute,”"’'^ even 
with respect to the next generation of smartphones, it is critieal that law 
enforcement access standards do not depend on tlie precision and 
capabilities of particular location technologies, or with tlie general state of the 
industry at the time of drafting. There has been an explosion in the growth of 
location-based services over the past several years. During that time, the 
precision of die location intormation these technologies produce has 
increased dramatically, such that single cell tower data — particularly where 
enhanced by some of the 350,000 femtocells deployed around the 
countryd’” — is becoming as accurate as GPS."'' Indeed, the rapid pace of 
innovation, driven by market incentives to enhance die accuracy of location- 
based advertising, suggests that location information will continue to become 
increasingly precise. 

A standard that is dependent on the precision of the location data 
requested creates an unstable, unworkable situation where, for example, 
certain magistrate judges feel compelled to examine deployment maps of cell 
towo.rs or seek expert guidance to determine die precision of die location 
data produced in a particular district"'"" To foster clear mles that can be 
applied without undue eonfusion, ultimately leading to greater stability in the 
law. Congress should enact law enforcement access standards that are not 
dependent on die specific precision of location data. 

3. Standards Alone Will Not Achieve the Appropriate Balance 

Most of die privacy community’s location information advocacy to date 
has focused on a “high” standard for law' enforcement access. This focus has 
led to a stalemate with much of the law' enforcement community and has put 
powerful members of Congress “on guard” to protect law' enforcement 
equities. Regardless of die standard required for law' enforcement access to 


238. See generally Albert Gidari, |r.. Companies Caught in the Aiiddk, 41 U.S.F. L, REV. 535 
(2007). 

239. See House judiciary 2010 ECPA Pyform Hearing, supra note 18, at 10 (written statement 
of James X. Dempsey, Vice President of Pub. PoKcy, Gtr. for Democracy & Tech.). 

240. See Press Release, Infoirna telecoms & Media, supra note 27. 

241. See In re 2010 SID. Tex. Application, ITI F. Supp. 2d 827, 834 (S.D. Tex. 2010) (“As 
cellular nctv'ork technology cvolvTis, the traditional distinction between ‘high accuracy’ GPS 
tracking and ‘low accuracy” cell site tracking is increasingly obsolete, and will soon be 
effectively meanhigless.”); see also sup'a Section ILF. 

242. Tee vgira Sections III.A.2, III.A.3. 



162 


2012] LAW ENFORCEMENT ACCESS TO LOCATION DATA 177 


location data, there are some privacy concerns that can only be addressed 
through post collection process and rules, such as data minimisation, 
subscriber notification, and statistical reporting. A regime of reasonable 
access standards combined with downstream privacy protections seems to 
present the best way forward. 

4. Insistence- on a Single l^ocation Standard Is a ‘M Foolish Consistency”^'''^ 

As stated in the Introduction, this proposal is not the most privacy 
protective, the least burdensome to industry, or the most law enforcement 
tnendly. Ratlier, it is an attempt to eliminate the unecrtainty and instability 
currently plaguing the law and to achieve a balance of equities that is more 
palatable insofar as it improves the positions of each of these stakeholders in 
some appreciable way. The process of passing legislation is largely about 
compromise. As a result, the “right” and politically feasible policy balance 
may not always create a perfectly “consistent” set of law enforcement access 
standards or privacy protections, if consistency is to be read as mere verbal 
or staictural symmetry for its own sake. 

Some privacy scholars have argued that the law, as a matter of policy, 
should treat historical and prospective location data the same, specifically 
calling for a justification for treating them anything other than the same.*"*^ 
Such an approach, however, would be a significant departure from existing 
statutory stinmillance law, which has traditionally treated historical (stored) 
and prospective (real time) information differently, requiring more process 
when the government compels real time information.^ ^ Insistence upon a 


243. “A foolish consistency is the hobgoblin of Uttle minds, adored by little statesmen 
and philosophers and divines.” Ralph Waldo Emerson, SelfHeliance, in 2 The COLLECTED 
WORKS OF ILllph W. Emerson: Essays: First Series 33 Qoseph Slater et al. eds., 1979) 
(1841). 

244. At the. 2011 Privacy T.aw Scholars Conference, co-sponsored by the law schools at 
the L'niversity' of CaHforma, Berkeley and The (leorge Washington University', the authors 
workshopped a draft of tliis Article. Several privacy scholars and members of the privacy 
community questioned our justification for treating stored location information differently 
from real time location data, advocating for a standard that would require a warrant for all 
location data. 

245. For example, tlie government can use a subpoena to obtain stored telephone toll 
records, see 18 U.S.C. § 2703(c)(2) (2010), but must get a Pen/Trap order from a court to 
obtain the same information in real time, see id. § 3121. In order to obtain the content of 
e-mails in real time, the government must meet higher hurdles of a wiretap “super” warrant, 
which requires a court to find that “normal investigative procedures have been tried and 
have failed or reasonably appear to be unEkely to succeed if tried or to be too dangerous,” id. 
§ 2518(c), in addition to several other “probable cause” requirements, see id. § 2518 (a)— (b), (d). 
On the other hand, the gpvemment can get stored e-mail content by meeting the standard 
Rule 41 “probable cause” showing, or less. See § 2703(a) -(b); see also ILoeation Hearistg. sipra 
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standard tliat is “consistent” in the sense only of being identically applied to 
this distinction would serve only to polarit:e the legislative process to the 
point of collapse. Law enforcement will predictably retreat to one comer in 
order to demonstrate how a probable cause standard for all location data 
would unduly limit investigative activities"* while privacy advocates will just 
as predictably withdraw support for any legislation that authonzes law 
enforcement to compel all location information with a unitary' standard lower 
diaii probable cause. Empathy is lost. Synthesis is precluded. This familiar 
impasse, which has become the norm in our recent political life, is here the 
fruit of a foolish consistency that would level a long-held distinction between 
tu'o eategones of data and, in doing so, likelyr derail a legislative balancing 
process that could improve die position of all stakeholders wdien measured 
against the current state of die law. 

As a matter of legislative strategy tiien, mandating a single standard for die 
sake of this leveling form of consistency has risks. Such consistency' can, of 
course, cut both ways: it would be equally consistent to allow law enforcement 
access to all location data widi eidier a probable cause warrant or a D Order. 
Indeed, consistency for its ow'n sake, argued in either direction, is a reductive, 
polarising position that short-circuits any legislative effort to harmonise the 
competing policy interests of the privacy and law enforcement communities. 

B. I low To Define Location Inforae\tion for Purposes of 

Amending the ECPA 

There are many data forms that reveal an individual’s location and that 
law enforcement can compel from tiiird-party' providers. These sources 
include wireless phone carriers and smartphone platform vendors (such as 
Apple and Cloogle). Location infonnation can also be discerned through 
transactional records, such as tollbootii, public transport, and credit card 
records."’*' Law enforcement agencies can also obtain location information 
directly, without going to third parties, by intercepting wireless phone signals 


note 19, at 82 (written statement of Judge Stephen Wni. Smith) (explaining levels of privacy 
protection given to different surveillance audiorities). 

246. JA vytra Section r\EB. 

247. See Ryan Singel, t’edf Warrantless^' Tracking Americans’ Credit Cards in Teal Time, 
Wired (Dec. 2, 2010), http:/ Avww.wired.eom/thrcatlevel/2010/12/ realtime/ (“Federal law 
enforcement agencies have been tracking Americans in real-time using credit cards, loyalty 
cards and travel reservations without getting a court order, a new' document released under a 
government sunshine request shows. . . . fSlo-called ‘Hotw'atch’ orders allow for real-time 
tracking of individuals in a criminal investigation via credit card companies, rental car 
agencies, calhiig cards, and even grocep' store loyalty programs.”). 
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using a Triggerfish, Stingray, or other similar tracking technologies,^^® or by 
covertly installing a GPS tracking device under a car. WTiile law 
enforcement’s access to these sources of data all raise legitimate privacy 
concerns, tins Article focuses on die compelled disclosure of location 
information from communications carriers, such as mobile phone services. 
Congress can, and should, look into other forms of location sun^eillance, but 
they remain beyond the scope of this Article. Our proposed standard, 
directed at third-party communication carriers, begins witli the following 
statutory definitions: 

An “electronic location serwee” (“F.T.S”) is any service which possesses 
location information about a customer, subscriber, or user. 

“I.ocation information” is any information deriwd or otherwise 

calculated from die transmission or reception of a radio signal that reveals 
the approximate or actual geographic location of a customer, subscriber, or 
user.*'*'’ 

“TIistorical location information” is location information that existed prior 
to the issuance of an order. 

“Current or prospective location information” is location information that 
comes mto existence after a court order for disclosure of tliat information is 
issued. 


248. Cell Site Siraulators, I riggeijish, Cell Phones (last updated Feb. 2.3, 2007), in U..S. Dep’t 
of Justice, Response to Freedom of Information Act Request No. 07-41.30 re: Mobile Phone 
Tracking 18 (Aug. 12, 2008), availabk at http:/ Avww.aclu.org/pdfs/freespeech/cellfoia_ 
release_074130_20080812.pdf (stating tliat Triggeilish can be deployed “without the user 
knowing about it, and without involving the cell phone provider”); Julian Sanchez, FOIA 
Docs Shone Feds Can Lojack hlobiks Without Telco Help, Ars Technica (Nov. 16, 2008), 
htqi:// aistechnica.com/ tech-policy/new's/2008/ 11/foia-docs-show'- feds-can-lojack-mobiles- 
without-telco-help.ars (“The ]ustice Deparbnenfs electronic suryfollance manual explicitly 
suggests that triggerfish may be used to avoid restrictions in statutes like CAFF.A that bar 
the use of pen register or trap-and- trace devices — ^w'hich allow tracking of incoming and 
outgping calls from a phone subject to much less stringent evidentiary standards — to gather 
location data.”); see it/ro Jennifer Valcntino-DcVrics, ‘Stingray’ Phone Tracker Fuels Constitutional 
CA'A WallST. J. (Sept. 22, 2011), http://on.w^sj.com/IhAIb7d. 

249. “Radio” refers to die radio frequency (“RF”) portion of tlie electromagnetic 
spectrum, which is “generally defined as that part of tlie spectrum w'here electromagnetic 
waves have frequencies in die range of about 3 kilohertz [3000 hertz] to 300 gigaliertz.” FED. 
COMMC’NS COMAl’N, BULLETIN NO. ,36, QUESTIONS AND ANSWERS jABOUT BIOLOGICAL 
Effects and Potential Hazards of Madiofrequency Electro aiagnetic Eields 2-3 
(4th ed., 1999), availabk «/http://w'W'wyfcc.gov/Bureaus/Engtaeenng_Technolog)'/Documents/ 
bullctins/oct56/oct56c4.pdf; see also Radio, Merrlam- Webster Dictionary Online, http:// 
w'ww.mcrriamwcbstcr.com/dictionary’/radio (last visited Mar. 19, 2012) (defining radio as 
“of or relating to electric currents or phenomena (as electromagnetic radiation) of 
frequencies between about 3000 hertz and 300 gigahertz”). 
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C. A Standard for Law Enforcement Compelled Disclosures 
OF Htstortcai. I^ocatton Data 

Our proposed law enforcement access standard for historical location 
information is built around tlae current D Order standard with the addition 
of an element specifically requiring courts to examine whether the scope of 
the request is reasonable in light of the criminal activity being investigated. 
We have previously discussed certain examples of scope permutations in 
investigations^^” — it would be useless to try and define all of them in 
advance. A discussion of how Congress generally views the scope inquiry 
could also be developed in legislative history. A court, when applying the 
standard, wall focus die scope of its inquiry on issues raised (and perhaps 
resolved) by the specific facts presented by the government in its application 
for a D Order. This standard could be drafted as follows: 

(a) DISCLOSURE UPON COURT ORDER.— Except as provided m 
paragraph (3), a provider of an electronic location service shall provade 
historical location information to a governmental entity^ only if the 
governmental entity obtains a court order issued by any^ court of competent 
jurisdiction establishing — 

(1) specific and articulable facts showing tliat there are reasonable 
grounds to believe that the location information requested is relevant and 
material to an ongoing criminal investigation; and 

(2) specific and articulable facts showing that a reasonable and sufficient 
nexus exists between tlae alleged or suspected criminal activity' described 
in paragraph (1) and the scope of the location data requested. 

(3) PERA/LUTED DISCLOSURES WffliOUT COURT' ORDER.— A 
provider of an electronic location service may disclose historical location 
information with — 

(A) the express consent of the customer, subscriber, or the user of the 
equipment concerned; or 

(B) as otherwise authorized m 18 U.S.C. § 2702(c)(3)— (6). 

By maintaining the “relevant and material” language, our standard preserves 
law enforcement equities while limiting the unnecessary' over-collection of 
historical location information by requiring courts specifically to approve the 
scope of a request Aloreover, this standard “forces” the government to 
articulate how the scope of the request is reasonable in light of the particular 


250. 3A rzyra Section III. Cl. 
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facts and needs of tlie investigation.^^ We hope tliat this t)'pe of balancing 
can foster a compromise between privacy advocates and law enforcement 
insofar as it docs not raise tlic histoncal data access standard up to probable 
cause that wmuld unduly limit law enforcement in die early stages of an 
investigation, but it does require written justification and court approval for 
the scope of the request. 

This standard also maintains the exceptions for disclosure of non-content 
records already present in the ECPA, including emergencies involving danger 
ot death or serious physical injury.' ' Finally, this proposed language clearly 
establishes the standard the government must meet before obtaining access 
to historical location data, a change that benefits all stakeholders. 

D. A STANDARD tOR LAW ENRORCEMEA E COMEELLED DISCLOSURES 
OF PROSPECTtV'E LOCATION DATA 

Our proposed standard for prospective location information requires a 
probable cause showing. We expand tlie categories of diat showang, however, 
to accommodate common, legitimate law enforcement uses of prospective 
location data, including location information pertaining to a person who has 
committed, is committing, or is about to commit a felony offense or is a 
victim of diat offense. 

'the DOJ has aclmowledged tliat, as a matter ot policyy it already? advises 
prosecutors and agents to obtain a probable cause warrant for GPS or 
similarly precise location information.^^^ Our standard not only codifies the 
DOJ’s existing practice regarding GPS and similarly precise location data but 
also requires a probable cause showing (based on the expanded categories) 
for all prospective location data. Insofar as single cell site data can now be as 
precise as GPS location information — and such precision will only? continue 
to increase over time — drawing distinctions in the law based upon data 
precision is no longer logical or workable. 


251. indeed, in Stephanie’s expenence as a federal prosecutor, when a standard calls for 
tills type of explanation, prosecutors and agpnts arc much more likely to tailor applications 
narrowly at the outset, in antieipation of court scrutiny. 

252. One of the current ECPA e.xceptious, 18 U.S.C. § 2102(c)(6) (2010), puts no Emits 
on providers sharing non-content infonnation with tlurd parties who are not law 
enforcement In recent testiniony, the DOJ has suggested that it may be appropriate for 
Congress to consider restricting disclosures of personal information by seivice providers. See 
Senate Judidary 201 1 ECPA Hearing, snpraaotc 7, at 10 (testimony of James A. Baker, Assoc. 
Deputy Attorney Gen., U.S. Dep’t of Justice). Insofar as this Article focuses on law 
enforcement access issues, it is beyond the scope of this Article to address this issue. 

253. See Senate JuiMiiar)' 201 1 ECPA Hearing, snpranott 1, at 7 (testimony of James _A Baker). 

254. See sttpra Sections III.A.l, III.B.l, III.C.l, IV.B; see also Eocalion Hearing, supra note 
19, at 85 (written statement of Judge Stephen Wm. Smitli). 
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^Vltll die expansion of the categories of probable cause, we have once 
again attempted to accommodate law enforcement investigative needs'"'^ in 
order to foster a compromise between law enforcement and privaey 
advocates. This standard could be drafted as follows: 

(1) DISCLOSURE UPON COURT ORDER LOR A PERIOD NOT' 'TO 
EXCEED 30 DAYS. — Except as provided in paragraph (2), a provider of 
an electronic location service shall provide a governmental entity current or 
prospective location information about a customer, subscriber, or user only 
if tlie governmental entity obtains a court order from any court of 
competent jurisdiction issued upon a finding tliat there is probable cause to 
believe that — 

(A) the information sought is evidence of a crime; or 

(B) a person is committing, has committed, or is about to commit a 
felony offense or is a victim of that offense; and the location information 
sought to be obtained concerns the location of tlie person believed to 
have committed, be committing, or be about to commit that offense or a 
victim of tiiat offense. 

(2) PERMITTED DISCLOSURES UTTHOUT COURT ORDER.— A 
provider of an electronic location sennee may provide the information 
described in paragraph (1) — 

(A) to a public safety answering pomt, emergency medical service provider 
or emergency dispatch provider, public safety, fire service or law 
enforcement official, or hospital emergency or trauma care facility, in 
order to respond to tire user’s call for emergency servhees; 

(B) witla the express consent of the customer, subscriber, or tlie user of 
the equipment concerned; or 

(C) as otherwise autliorized in 18 U.S.C. § 2702(c) (3) -(6). 

(3) DEFINITION. — ^The term “public safety answering point” means a 
facility tliat has been desigiated to receive emergency calls and route them 
to emergency service personnel. 

(4) EX'TENSIONS. — Extensions of such an order may be granted for up 
to 30 days upon a probable cause showing as defined in sections (A)-(B) of 
paragraph (1) of tliis provision. 

This statutory language is not from the ECPA refomi hearings ot 2010— 
2011.*^'’ Rather, it is adopted from a bill, entitled die “Electronic 
Communications Privaqr Act of 2000,” reported out favorably by a 


255. See supra Section III.C. 

256. iUdiscrission supra Parts I, IV. 
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Republican-controlled House Judiciary Committee. The bill never became 
law, but It applied the “expanded” probable cause standard to prospective 
location infonnation."^^ These expanded probable cause standards address 
situations where, tor example, law entorcement may have probable cause to 
believe someone has committed a crime yet the suspect’s current or 
prospective location information may not itself be evidence of a crime.””® 

Consistent with other real-time surveillance authorities like Pen/Trap and 
the Wiretap Act, our proposal affords prospective location information a 
higher degree of privacy protection than diat given to previously stored 
information.”®’ Also mirroring the Wiretap Act,™ our proposal places a time 
limit of thirty days for each individual order, without preventing the 
government from returning to a court for an extension. This standard also 
includes specific exceptions to allow for die operadon of die K-911 system™ 
while incorporating all of the exceptions for non-content information already 
present in the ECPA. Finally, this proposed language clearly establishes a 
standard the government must meet before getting access to prospective 
location data, a change that again benefits all stakeholders. 

F.. Post Access Rlt.rs axd “Down.strram” Privacy Protections 

It is obviously important for Congress to select the right legal standard 
required for law enforcement to obtain location data. Equally important to 
an overall privacy framework, however, are mles regarding the retention of 
the data once it is acquired, notice to individuals whose infonnation has been 
acquired by law enforcement, and reporting requirements to Congress.™ 
Indeed, such “downstream” protections can offset any over-collection of 
information by law? enforcement during the course of an investigation. This 
Section proposes three specific mediods to protect privacy following die 


257. See H.R. 5018, 106th Cong. § 6(a) (2000). 

258. i'fi’ v/yra Section III. C.2. 

259. See discussion s«pm note 245 and accompanying text. 

260. 18 LI.S.C. § 2518(5) (2010). 

201. l-ocatioH Hearing, supra note 19, at 30 (statement of Afichael jAniarosa, Sr. Vice 
President for Public Affairs, TmePosition Inc.) (describing the FCC E-911 requirement). 

262. See Oiin S. Kerr, Use Restnetions and the Future op SuneeiUance Faw, blJTURE Const. 
(Brookuigs Inst., Washington, D.C.), Apr. 19, 2011, available a? http://www.brookings.edu/ 
papers /2011/0419_survcillancc_laws_kcrr.aspx (‘JT]hclaw should stiH regulate the collection 
of evidence. But surveillance law shouldn’t end there. The shift to computerization requires 
renewed attention on regulating the use and disclosure of infonnation, not just its 
collection.’/). 




169 


184 BERKELEY TECHNOLOGY LAW JOURNAL [Vol. 27:117 


disclosure of location information to law enforcement: minimization, 
notification, and congressional oversight through statistical reporting.’^ 

1. Minimi^^atio-n 

Given the large amount of data that law enforcement agencies now 
obtain via location requests and the number of innocent people whose 
information may be obtained tlirough community of interest requests or 
requests associated witla a specific place, we believe that minimization mles 
can and should play a role in limiting the privacy harms associated with such 
data collection. These minimization rules would focus on removing irrelevant 
location data from law enforcement databases at a time appropriate to the 
particular investigation or case. Minimization requirements are not a new 
idea. They already play a privacy protective role in several other surveillance 
statutes, ineluding the Wiretap Act,“'' the USA PATRIOT Improvement and 
Reaudiorization Act of 2005 (“PATRIOT' Act”),*'’^ and die foreign 
Intelligence Surveillance Act (“FISA”).^'’’’ 

Although Congress has frequently enacted minimization requirements, it 
has never legislated the specific details of how such minimization w-ould 
work with respect to particular surveillance authonties or investigations. In 
bodi die Wiretap Act and EISA, govmmment lawyers submit minimization 
protocols as part of their applications, which are then approved by a judge 
and included in the court order. Likewise, in the PATRIOT Act, Congress 
directed the DOJ to adopt specific minimization procedures for records 


263. Tlieie are other types o£ downstream privacy protections that could and perhaps 
should eventually be included in a privacy framew'ork — e.g., the unsealing of court orders 
with appropriate redactions at a time w^hen such unsealing would no longer jeopardize an 
investigation or place individuals involved in it at risk. See, e.£., Stephen Wm. Smith, Kud-e^u in 
the Courthouse: Judgments Made tn the Shade, 3 FED. CDS. L. REV. 177 (2009) (arguing that die 
overabundant, indefinite sealing of certain typies of judicial orders undemiines the legitimacy 
of those decisions). For the purpose of making good policy, unsealing, whether after a 
specified period or after specific conditions hav'e been met, could facilitate greater 
transparency and provide Congress with better information about how the government uses 
and courts apply surveillance authorities. Notwithstanding the potential utility of sueh a 
policy, how^ever, w^e believe that the unsealing of court records raises serious security and 
privacy issues tiiat require a complex and lengthy analysis that is beyond both the scope of 
ECPA reform and tliis Article. 

264. Title III of the Omnibus Crime Control and Safe Streets Act of 1968 for tiie first 
time authorized law enforcement personnel to monitor private telephone conversations. 
Pub. L. No. 90-351, tit. Ill, 92 Star. 197, 211-25 (codified as amended at 18 U.S.C. §§ 2511- 
2520 (2010)). The Act also provided strict guidelines and limitations on the use of wiretaps 
as a barrier to government infrmgpmcnt of individual privacy. One of the protections 
included by Congress was tlie minimization requirement of 18 U.S.C. § 2518(5). 

265. 50 U.S.C. § 1861(g) (2009). 

266. W. § 1804(a)(5). 
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obtained pursuant to Section 215 orders. Section 215 is a national security 
collection authority that allows the government to obtain both content and 
non-contcntinfo nnatio n ' 

As such, wc propose that Congress should require the DOJ, in 
consultation with State Attorneys General, to develop rules and procedures 
for die minimization of location information. Such rules would be intended 
to prevent the retention of information that is not relevant to reasonable law 
enforcement purposes. Statutory language could be drafted as follows: 

Die Attorney General, in consultation widi State Attorneys General, shall 
adopt specific minimization procedures governing the retention and 
dissemination by governmental entities of location information received in 
response to an order under this section. 

In diis section, die term “iiiinimization procedures” means specific 
procedures, reasonably designed in light of the form and purpose of an 
order for the production of location information, to minimize the retention 
and prohibit the dissemination of non-publicly available location 
information concerning non-consenting persons, consistent widi die need 
of law enforcement to obtain, retain, produce, and disseminate infoimation 
diat: 1) IS evidence of a crmie, or 2) concerns the locadon of a person who 
is committing, has committed, is about to commit, or is a victim of a felony 
offense; or 3) is otherwise relevant and material to an ongoing criminal 
investigation and to be retained or disseminated for law enforcement 
purposes. 

This language gives the Attorney General, in conjunction with the State 
Attorneys General, tlie flexibility and discretion to design minimization rules 
and procedures consistent with law enforcement needs while minimizing the 
retention and dissemination of location data that is not or is no longer 
relevant to legitimate law enforcement purposes. 

2. ^Notification 

Covert surrreillance methods are investigative tools that by their very 
nature invade tlic privacy of those targeted and arc, as history has shown, 
prone to abuse."'^'* T'o ensure these sunreillance powers are restricted to 


267. Section 1861 of Title 50, commonly referred to as “Section 215 Business Records,” 
permits tlie government to obtain, with a FISA court order, any “tangible tiling” for certain 
types of national security investigations. Such Section 215 minimization procedures were 
intended to minimize the retention and prohibit tire dissemination of non-publiciy available 
information concerning United States persons consistent with national secunty interests. See 

§ 1861(g). 

268. See Julian Sanchez, IVmfapping’s Tme Danger, L.A. TlIdES (Mar. 16, 2008), http:// 
ai'ticles.latimes.cum/2008/mar/16/opiniun/op-sanchezl6 fWitiiout meaningful oversight, 
presidents and intelHgence agencies can — and repeatedly have — abused their sur\^eillance 
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legitimate law enforcement investigative needs, sumeillance of innocent 
persons should be limited whenever possible and, whenever employed, it 
should not remain secret indefinitely. Sueh transparency facilitates social and 
congressional oversight of government use ot surveillance techniques: 
individuals who may have been inappropriately or illegally monitored are 
provided with information and resulting incentives that may motivate them 
to pursue personal remedies, such as placing facts about the sun^eillancc in 
die public record. Indeed, a disclosure mechanism that will raise public 
awareness of, and stimulate public discourse about, die scope and frequency 
of government surveillance activities may serve as an important deterrent to 
gratuitous use or abuse of these powers. 

In both the Wiretap Act and the Stored Communications Act, Congress 
created mandatory notice requirements that guarantee tiiat subjects of some 
forms of law enforcement sun^eillance would be told that tiieir 
communications have been intercepted or accessed.*''^ Such notice provisions 
act as an important prwacy protection that particularly benefits those who are 
subjects of surveillance but never charged witii a enme. While tiiose who are 
eventually arrested and charged might otiiervtise learn that they have been 
the target of surveillance (through the disclosure of search warrants, 
affidavits, and other documents), those who are not charged would never 
know about tlieir surveillance histones v?ere it not for tlie existence of notice 
requirements in existing surveillance laws. 

W'e propose a similar notice requirement for those individuals whose 
location information is obtained by law enforcement agencies. This 
requirement will apply to tliose individuals targeted in location orders, as well 


autliority to spy on political enemies and dissenters. . . . [A] thorough congressional 
hives hgadon headed by Sen. Frank Church (D-Idaho) revealed dial for decades, intelligence 
analysts — and the presidents they sewed — ^liad spied on the letters and phone conversations 
of union chiefs, chdl rights leaders, journalists, antiwar activists, lobbyists, members of 
Congress, Supreme Court justices — ewn Eleanor Roosevelt and the Rev. Martin Luther 
King jr. The Church Committee reports pamstakrngly documented how the information 
obtained was often ‘collected and disseminated in order to scivc the purely political interests 
of an intelligenee agency or the administration, and to influence social policy' and political 
action.’ ”). 

269. See 18 U.S.C. § 2518(8)(d) ('Xhretap Act notifications) and §§ 2703(b)(1)(B), 2705 
(ECPA nofifications). ECPA notifications only apply to die disclosure of content (not non- 
content) and then only when a § 2703(d) order or subpoena is used to compel content. If 
using a Rule 41 warrant to compel content, at least one court held that the government only' 
has to notify the service provider, not the customer or subscriber. In n Apphcation for 
Warrant for E-mail Account lrcdactcdl@gmail.com Maintained on Computer Scryxrs 
Operated by Google, Inc., Headquartered at 1600 Amphitheater Parkw'ay, Mountain Viewy 
CA, Mag. No. 10-291-M-01 (D.D.C. Nov. 1, 2010) (Lamberth, ).), miailable aL http:/ /wTvw'.dcd. 
uscourts.goy'/dcd/sites/ died/ files /maglO-291. pdf. 
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as innocent individuals whose information may be obtained as part of 
disclosures associated with specific places or community of interest requests. 
In addition to facilitating transparency and providing notice to impacted 
individuals, tliis requirement will, similar to existing compensation 
requirements,"’ ° discourage law enforcement agencies from making 
unnecessaty requests for large amounts of data,"’' as the cost of notifying 200 
people will presumably^ be greater than that of notifying only t^'cnty. This 
requirement could be drafted as follows: 

(a) NOTIFICATION.— 

(1) Within 90 days after the disclosure of historical location information, 
or the expiration of an order authorizing prospective location infomiation, 
the governmental entity shall serine upon, or deliver by appropriate 
means,"'" the customer, subscriber, or user whose location was disclosed 
with notice that — 

(A) states witli reasonable specificity' tlie nature of the law enforcement 
inquiry'; and 

(B) iiifomis such customer, subscriber, or user tliat dieir location 
information was supplied to that governmental authority, and the date 
on which such disclosure was made. 

(2) Extensions of tlae delay' of notification of up to 90 days each shall be 
granted by tlae court upon application by a governmental entity if the 
court determines that there is reason to believe tlaat notification of the 
existence of tlie court order may have an adverse result described in 
par'agraph (3) of this subsection. 

(3) An adverse result for the purposes of paragraph (2) of tliis subsection 
is — 


270. JN Houst; Judiciary 2010 UCPA Kefomj Jdearing^ supra note 18, at 32 (v'fitten 
statement of .hlbert Gidari, Perkins Coie T.I.P) (“Vtdie.n records are ‘free/ such as with phone 
records, law enforcement over-consumes with abandon. . . . But when service providers 
charge for extracting data, such as log file searches, law enforcement requests are more 
tailored.”). 

271. William J. Stuntz, Tht JOislnbuliun of Faur/b AmondmiaU Privacy, 67 Geo. WASH. L. 
Rev. 126,5, 1275 (1999) (“[I]f you tax a given kind of [law enforcement] behavior, you will 
probably see less of it”). 

272. Due to tire widespread popularity' of prepaid phones, many communications 
carriers do not have a name or address on file for large numbers of their customers. As a 
result, It would not be possible for tlie earners to notify' these customers via U.S. mail 
(something required for surveillance of internet communications content performed under 
18 U.S.C. § 2705(a)(5)). The use of the term “appropnatc means” is designed to enable 
companies to notify' their customers via a communication medium that is appropriate to the 
serv'ice they offer, and the contact information they have on file. This could include, for 
example, email, or mobile text message (“SMS”). 
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(A) endangering the life or physical safety of an individual; 

(B) flight from prosecution; 

(C) destixiction of or tampering with evidence; 

(D' intimidation of potential witnesses; or 

(E) otlienvise seriously jeopardizing an investigation or unduly delaying 

a trial. 

(b) PRECLUSION OL NOTICE TO SUBJECT Oh GOVERNMENTAL 
ACCESS. — ^A governmental entity acting under section [x] may apply to a 
court for an order commanding a provider of an electronic location service 
to whom a court order issued under section [x] is directed, for such period 
as tlae court deems appropriate, not to notify any other person of tlie 
existence of the court order. The court shall enter such an order if it 
detemiuies that there is reason to believe tliat notification of the existence 
of tlie court order will result in — 

(1) endangering the life or physical safety' of an uidividual; 

(2) flight from prosecution; 

(S) destmction of or tampering with evidence; 

(4) intimidation of potential witnesses; or 

(5) otherwise seriously jeopardizing an investigation or unduly delaying a 

trial. 

This section requires the law enforcement agency to notify all persons whose 
location information it obtains within ninety days after either the disclosure 
of historical data or the end of prospective surveillance. Individuals shall be 
notified via “appropriate” means, which could be a series of text messages, 
an email, or a letter, depending on the contact information known to law 
enforcement. As with other notification statutes, the proposed section also 
permits the government to seek further delay of notice witli cause, as well as 
prohibit a location provider from telling a target that her location 
information has been disclosed. ''Aflien notifying innocent third parties that 
their location information was disclosed (incidentally) as part of a “broad” 
authorization, the governmental entity' making the notifieation should 
consider language tliat communicates die benign nature of the disclosure. 

3. Surveillance Statistics 

Vvlien Congress created botli die wiretap and pen register/ trap and trace 
interception statutes, it mandated the annual publication of aggregate 
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statistical reports’’’ that were “intended to form the basis for a public 
evaluation of [the statute’s] operation [and] will assure the community that 
the system of court-ordered electronic sun'cillance ... is properly 
administered.”’''' Since at least 1998, the Administrative Office of the United 
States Courts (“AO”) has made copies of tliese reports available to the 
general public via its website.’'^ The public release of the annual report 
usually leads to media coverage highlighting the inereased use of wiretaps.’’*’ 
These statistics also provide a nch source of infonnation for scholars 
wishing to study and report on the ever-increasing use of electronic 
sunreillance."'' By comparing tliese reports, scholars have been able to 
observe several notable surveillance trends. These include that the majority 
of wiretaps arc for dmg crimesty® that courts rarely, if ever, refuse wiretap 
applications;’''’ that the vast majority of wiretaps target mobile phones;’®” and 
tlie ever-growing use of wiretaps by state law enforcement agencies.’® 


273. See supra 171. 

274. S. Rep. No. 90-1097, at 69 (1968), fvpnnted m 1968 U.S.C.C-A.N. 2112, 2185, and 
available <5? 1968 WL 4956, at -*2185. 

275. See, e,^., Admin. Office of the U.S. Courts, 1997 Wiretap Report (1998), 
http://wcb.archivc.org/wcb/ 199812061 35425/www.us courts.gov/wirctap/contcnts.html. 

276. See, e.j^., ISa/ional Nen-’s Bnefs; Raevrd Total of Wiretaps Was A.ppTuved by Courts, N.Y. 
Times (May 10, 1998), http://nyti.ms/ThNliQj; Susan SteUin, Compressed Data; W'^lx/s 
Watching? No, Who’s Tistsning In?, N.Y. Times (June 3, 2002), http:/ /nyti.ms/ThNp2d; Ryan 
Singel, Police Wintappmg jumps 26 Percent, WIRED (Apr. 30, 2010), http://u^"w. wired.com/ 
threatlevel/2( ) 10/04/ wiretapping/ . 

277. See Cloud Based Coftiputing Hearing, supra note 165, at 130 (oral answer from bred 
Cate, Prof and Director, Ctr. for Applied Cybersecunty Research, Ind. Umv., to Chairman 
Nadler) (‘‘[Surveillance] statistics gives Congress a sound empirical basis on which to 
evaluate how its laws are being used and wliether they need to be changed. It also provides 
diat same infonnation for people such as tliose of us gatliered at this table when making 
recommendations to Congress. And it proAdes infonnation to the public and the press so 
that they know how those laws are being used and to what effect.’"); see also Soghoian, supra 
note 170. 

278. Soghoian, sipranott 170, at 9 (“[Mjore than 86 percent of die 2306 wiretap orders 
obtained [in 2009] by federal and state law enforcement agencies were sought in narcotics 
in ve s tigations . ’") . 

279. See id. at 6—7 (“Between 1987 and 2009, law’ enforcement agencies requested over 
30,000 wdretap orders. . . . During tlie more tlian 20 years for which public data exists, 
requests for wiretap orders have been rejected just 7 times, tutice in 1998, once in 1996, 
fwTce in 1998, once in 2002 and once in 2005.”). 

280. See id. at 7 (“96 percent (2,276 wiretaps) of all authorized wiretap for 2009 are for 
portable devices.”). 

281. See id. at 12 (“Over tlie last decade, the use of electronic surveillance orders has 
increased nationwide, although this is largely due to a massive increase in use by the 
states .... [California and New York] are now^ responsible for a combined 58 percent of all 
state wiretap orders.”). 
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^X'llile much is known about the scale and use of wiretaps and, to a lesser 
extent, Pen/Trap surveillance, law enforcement requests for location 
information arc largely a “known unknown. Wireless companies and dicir 
representatives have provided, at best, a partial picture wJiose details emerge 
only tlirough Freedom of Information Act requests and otlier investigative 
reporting techniques by privacy advocates.**'’ That picture is not sufficiently 
clear to guide Congress regarding the use of this surveillance technique.**' To 
remedy diis deficiency, we propose a specific reporting requirement that wall 
enable Congress to know? as much about tlae state of location surveillance as 
it currently know?s about waretaps and would, as Senator Patrick Leahy has 
desenbed, provide a “far more reliable basis than anecdotal evidence on 
which to assess law' enforcement needs and make sensible policy in this 
area.”* * This standard could be drafted as follows: 

(a) GF.NERAT. RUIEMAKING AUTHORITY FOR REPORTS UNDER 
THIS SECTION. — ^The Director of tire Administrative Office of the 
United States Courts may make rules regarding the content and form of the 
reports required under tlris section. 

(b) REPORTS CONCERNING DISCLOSURES.— 

(1) TO ADMINISTRATIVE OFFICE.— Not later than 30 days after the 
issuance or denial of an order under this chapter compelling the 
disclosure of location information, tire issuing or denying judge shall 
report to the Administrative Office of the United States Courts — 

(A) die fact diat an order was applied for; 

(B) the type of order applied for; 

(C) w-Iiedier the order was granted as applied for, was modified, or was 
denied; 

(D) w'hether the court also granted delayed notice and the number of 
times such delay was granted; 

(E) die offense specified in the order or application, or extension of an 
order; 


282. News Transcript, U.S. Dep’t of Defense, DoD News Briefing — Secretary 
Rumsfeld and Gen. Myers (Feb. 12, 2002), availahk at littp://www. defense.gov/transcripts/ 
transcript. aspx?transchpfid=26.36 (“[T|here are known knowns; there are things we know we 
know. We also know' there are known unknowns; tliat is to sav w'e know there are some 
tilings u'e do not know.”); sie also stpra Part I (discussing details about what is known 
regarding the scale of location surveillance). 

283. See generally Soghoian, supra note 170. 

284. Id. 

285. 145 Cong. Rec. 31,311 (1999) (statement of Sen. Lealiy/. 
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(F) the identity, including district where applicable, of the applying 
investigative or law enforcement agency making the application and the 
person autiiorizing die application; and 

(G^ the type of information or records sougfit in the order. 

(2) 'fO CONGKIiSS. — ^in April of each year the Director of the 
Administrative Office of the United States Courts shall report to 
Congress with respect to the preceding ciilendar year — 

(A) the overall total number of each of the events described in the 
subparagraphs of paragraph (1), regarding applications reported to that 
Office; and 

(B) a summary and analysis of the data described in paragraph (1). 

(e) PROkdDER REPORTING REQUIREMENTS,— 

(1) TO ADMINISTRATIW OEPICE.— Except as provided in 
paragraph (2), in January of each y^ear each provider of an electronic 
location service shall report with respect to die preceding calendar year to 
the .Administrative Office of the United States Courts — 

(A) die number of legal demands and emergency requests received 
from Federal law enforeemeiit agencies during die preceding calendar 
year for location iiifomiation; 

(B) the number of legal demands and emergency requests received 
from State, local, and tribal law enforcement agencies during the 
preceding calendar for location information; and 

(C) the number of accounts about which location iiifomiation was 
disclosed, specifying the numbers disclosed pursuant to legal demand 
and die numbers disclosed voluntarily, to Federal, State, local, or tribal 
law enforcement agencies. 

(2) EXCEPTIONS. — ^I'he requirement of paragraph (1) does not apply 
to a provider of an electronic location service that, during the reporting 
period — 

(A) received fewer than 50 requests combined from law enforcement 
agencies; or 

(B) disclosed account information concerning few'er than 100 
subscribers, customers, or otiier users; or 

(C) had fewer dian 100,000 total customers or subscribers at the end 
of die calendar year.-*'^ 


191 


286. The purpose of these statistics is to provide Congress, scholars, and the general 
public widi information necessary to detemiine die scale of sun^eillance and to observe 
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(3) COAIPENSATION. — ^The Director of the Administrative Office of 
the United States Courts shall provide reasonable compensation to a 
provider for the costs of compiling a report required under tliis 
subsections^' 

(4) CONidDDN'riALIfY Of IDEAlTi'Y Of SERVICE 
PROVIDERS. — ^The Director of tlie Administrative Office of the United 
States Courts shall establish procedures to prevent the release to the 
public of the identity of service providers with respect to disclosures they 
make under this subsection.^ss 

(5) TO CONGRESS. — ^In April of each year, the Director of the 
Administrative Office of die United States Courts shall report to 
Congress with respect to the preceding calendar year — 

(A) the total nruiibers of legal demands and of disclosures required to 
be reported under paragraph (1); and 

(B) a summary and analysis of the information required to be reported 
by paragraph (1), but without disclosing the identity of any service 


general trends. Information Rom small providers who receive just a handful of requests per 
year will not significantly aid in the ability to observe such trends, in comparison to the tens 
of thousands of requests received by large providers. Furthermore, this notice requirement, 
while modest, could still be quite burdensome for a small provider. It is for this reason that 
we have opted to exempt such providers from the statistical reporting requirements. 

287. As a general mle, companies are not in favor of regulations diat are costly to 
comply with. Although we do not believe that the cost of compiling and submitting these 
reports will be exceedingly expensive (particularly given that Google already provides some 
data voluntarily), we have included a compensation provision to avoid giving companies a 
reason to lobby against it. W'e believe that the data tliat will be made public as a result of this 
provision is worth the modest cost to the taxpayer. 

288. Although most large internet and telecommunications companies that handle user 
data receive both compulsory and voluntary location data requests from the govemmeiit, 
few like to discuss the topic pubhely. As such, many companies might vigorously oppose diis 
statistical reporting requirement if it would mean that their names would be associated with 
the data that eventually becomes published. In order to respond to companies’ concerns, this 
provision has been drafted to ensure that identities of the companies will remam 
confidential: only a^egate statistics will be published. In March 2010, Microsoft Associate 
General Counsel Mike Hintze told a reporter at W'ired that the reason Microsoft docs not 
pubhsh statistical data regarding the number of legal requests the company receives for 
customer infomiation is due to the fear of negitive pubheity. ‘We would like to see more 
transparency across tlie industry,” Hintze said. “But no one company wants to stick its head 
up to talk about numbers.” Ryan Siiigel, Google, Mimsojt Push Feds To Fix Pnvaiy La?ps, WIRED 
(Mar. -30, 2010), http:/ /vn,vw. wired. com/threatlevel/2010/0-3/gpogle-microsoft-ecpa/; see aiw 
Letter from JVlichacl f. Gershberg, Counsel to Yalioo! Inc, to William Bordley, FOIPA 
Officer, U.S. Marshals Serv. 9 (Sept. 15, 2009), available t?/ http://cryptome.org/yahoo-pnce- 
Hst-lcttcr.pdf (“[Surveillance pncing] mformation, if disclosed, would be used to ‘shame’ 
Yahoo! and other companies — and to ‘shock’ their customers. Therefore, release of Yahool’s 
information is reasonably likely to lead to impairment of its reputation for protection of user 
privacy and security, which is a competitive disadvantage for technology companies.”). 
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provider with respect to tlie disclosures to law enforcement tliat service 
provider made. 

This section creates a new statistical surveillance report for Congress tliat 
documents the issuance of orders compelling the disclosure of location 
information. The AO"*'^ will compile the annual report based on information 
submitted to it by judges who have issued orders in response to government 
applications to compel location information. The AO will then submit the 
compiled information in a report to Congress. This section also requires 
providers of an electronic location service (other than those falling below a de 
minimis threshold) to submit annual reports regarding the number of 
compelled and voluntary disclosures of location information they have made 
to the The AO will then compile the data collected, produce a 

statistical summary containing no reference to the names of individual 
providers, and submit the iniormation in a report to Congress. 

VII. CONCLUSION 

The use of location information by law enforcement agencies is common 
and IS becoming more so as technology improves and produces more 
accurate and precise location data, 'i'he legal mystery? surrounding die proper 
law enforcement access standard for prospective location data remains 
unsolved and has created, along with conflicting rulings over the appropriate 
law enforcement aceess standard for both prospective and historical location 
data, a messy, inconsistent legal landscape where even judges in the same 
district may require law enforcement to meet different standards before 
authorizing law enforcement to compel location data. .?\s courts stmggle w?ith 
these intertwined technology?, privacy, and legal issues, some judges are 
expressing concern over the scope of die hanns, from specific and personal 
to general and social, presented by unfettered government collection and use 
of location data. 


289. The AO is the preferred entity to manage and execute this task because it is an 
objective, neutral organization and because it has historically produced the annual Wiretap 
Report (part of the Omnibus Crime Control and Safe Streets Act of 1968) in an accurate, 
timely maimer. See 145 CONG. Rec. 31,311 (1999) (statement of Sen. Leahy) (“Tlie AO has 
done an excellent job of preparing die viretap reports.’). Placing die reporting burden with 
the AO also prerents law enforcement from complaining that the reporting requirements are 
tummg “crime figliters into bookkeepers.” House Judiciary 2000 ECPA Hearing, supra note: 175, 
at 39 (statement of Kevin DiGregory?, Deputy? Assoc. Attorney Gen., Dep’t of Justice). 

290. The AO is only capable of compiling information on court orders for location 
information. Statistical data for voluntary disclosures made in emergencies can only come 
from the providers or law enforcement, and so we have opted to place this burden on the 
providers, who are then compensated for tiieir trouble. 
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reform. Our solution follows tiie suggestions of some jurists who have 
considered the potential social harms posed by location-based technologies 
and services: that Congress may be best suited to address these issues. We 
agree and offer die foregoing proposal as a strong initial step in tiiat 
direction."” 


291. During the writing of this Article, three bills in the 1 12th Congress were introduced 
proposing new law enforcement access standards for location data. See S. 1011, 112th Cong. 
(2011); S. 1212, 112th Cong. (2011); and H.R. 2168, 112th Cong (2011). None of these bills 
currently contain downstream privacy protections. Two of the bills, S. 1212 and H.R. 2168, 
require a Rule 41 “probable cause’’ standard for all law enforcement compelled disclosures 
of location data, including the use of GPS tracking devices placed on cars. "VCliile S. 1011 
allows law' enforcement to compel historical location data witli a D Order, tliere is no scope 
element addressing whedier tliere is a sufficient nexus betw^eeii die alleged or suspected 
criminal activity and the scope of the location data requested. See supra Sections III.C.l, 
111.C.2. S. 1011, like the two odier bills, requires a Rule 41 “probable cause” shownng for law' 
enforcement to compel prospective data (including the use of GPS tracking devices) but 
similarly docs not take into account the “probable cause of what” problem that may inhibit 
law enforcement from acquiring the current or prospective location of a subject who, for 
example, has committed a past crime u'hen the subject’s current or prospective location is 
not itself evidence of a enme. 
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May 16, 2012 

The Honorable F. James Sensenbrenner 

Chairman, Subcommittee on Crime, Terrorism, and Homeland Security 

Committee on the Judiciary 

United States House ot'Representatives 

2138 Rayburn House Office Building 

Washington, DC 20515 

RE: H.R. 2168, the Geolocational Privacy and Surveillance Act 

Dear Chairman Sensenbrenner, 

We write on behalf of the thousands of law enforcement professionals our organizations 
represent to offer comments on HR. 2168, the GPS Act. We have serious concerns about the 
potential impact that the GPS Act as written would have on our ability to protect the citizens we 
serve. Briefly, here are some of our concerns: 

• the broadly written language would significantly lengthen the investigative timeline 
in a wide range of investigations by requiring a warrant to be issued where a 
subpoena or administrative process is currently sufficient; 

• emergency provisions in the bill are not specific enough to prevent problems of 
access to critical evidence in times of highest need; 

• in the absence of a demonstrated pattern of abuse or misuse of location evidence by 
law enforcement it is not clear what problem this bill addresses; 

• the bill does not address the major issue of service provider responsiveness to 
legitimate law enforcement process requests; 

• the Supreme Court clearly signaled in the Jones decision that it is likely to take up 
related cases, and until the Court mote fully develops constitutional protections for 
location evidence we urge Congress to not act to restrict law enforcement access to 
such evidence. 

We urge the committee to carefully consider the insights of the highly-trained 
practitioners who develop and utilize location evidence to solve crimes and save lives before 
acting on any legislation. If our ability to access and utilize this information on a timely basis is 
significantly limited, as we read the GPS Act to do, it may be some of the most vulnerable 
among us who will bear the cost. 

We are always mindful of our responsibility as guardians of a free society to minimize 
unnecessary intrusions into citizens’ privacy. One doesn't have to look very far these days to find 
articles expressing concern about the amount of location evidence obtained by law enforcement 
and private companies. Notably absent from the public discourse, however, has been any 
discussion of the countless cases where location evidence has been used to rescue abducted 
children, identify and prosecute sexual predators, and capture dangerous fugitives. Eiqually 
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absent is any indication of a pattern of abuse by the professionals who use this information on a 
regular basis. This compels us to ask: what problem is the Act meant to solve? 

Location records constitute a critical source of evidence in an ever-expanding range of 
investigations. The present balance of judicial supervision and law enforcement efficiency is an 
appropriate one and has existed for some time. That balance should not be abandoned without a 
demonstrated need for an increase in privacy, and a demonstrated pattern of abuse — neither of 
which have been shown to exist. We believe the GPS Act is drafted so broadly that the bill could 
be read to require a search warrant to gather many forms of information that can currently be 
obtained by subpoena. Such a standard would hamper law enforcement’ s ability to quickly and 
efficiently obtain the information that could save lives. Law enforcement must be able to work 
critical investigations without undue delay; therefore, legal reforms should contract the 
investigative timeline at the same time they protect privacy and promote innovation. We believe 
the proposed GPS Act could lead to a lengthening of the investigative timeline, with adverse 
consequences for crime victims and public safety overall. 

Location evidence is used to good effect in many instances where law enforcement may 
not have generated probable cause sufficient to satisfy the warrant requirement. Further, the time 
required to generate a search warrant and have it signed, even in cases where probable cause 
exists, may hamper law enforcement’s efforts to move quickly in an investigation. This is 
particularly true in quickly-evolving, high- volume cases like child abductions, where every 
second counts and every possible lead must be explored. Of course, if Congress chooses to 
elevate the standard for location evidence to probable cause, law enforcement will adapt. Such a 
change would extend the investigative timeline and decrease the number of leads law 
enforcement can pursue in a given time period, however, and in some cases, prevent officers 
from obtaining records that would be helpful. The human cost of these changes should not be 
discounted. 

Any discussion of law enforcement use of location evidence, and communications 
records generally, would be incomplete without some consideration of the practical obstacles 
that law enforcement currently faces in obtaining this evidence from service providers, 
irrespective ofthe legal standards. Whatever level of process is ultimately deemed appropriate, 
the undersigned organizations urge the Committee to take steps to guarantee that law 
enforcement is able to access the required communications records - including location 
information - once that process is obtained. The emergency exceptions outlined in §2602(f) of 
the GPS Act may seem to provide the necessary recourse, for example, but if there is no statutory 
mandate for a service provider to turn over the records, and no time frame for compliance, we 
may effectively be denied the information we need, whatever the level of legal process. The law 
should provide a framework that will enable the rapid transfer of information when needed, and 
properly incentivize service providers to respond rapidly to process calling for critical location 
information. 

As a final point, we note that the United States Supreme Court has recently expressed a 
great deal of interest in defining the protections offered by the Constitution in this area. In 
particular, the recent Jones decision demonstrates a clear trend towards further delineation of 
privacy protections with respect to location evidence. 
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The undersigned organizations believe that the GPS Act’s broad prohibition on law 
enforcement’ s use of location evidence without a warrant will significantly erode our access to 
location evidence and our efficiency in obtaining it. Tn the absence of any demonstrated problem 
with the current framework, and given the expectation that the Supreme Court will more fully 
develop constitutional protections for location evidence soon, we believe legislative action at this 
time would be premature. We urge the members of the Committee to consider the impact on law 
enforcement’ s ability conduct effective and efficient investigations carefully before making any 
adjustment to the existing law. What seems like an acceptable change in abstract discourse may 
seem less so when a child is missing and every second counts. 

Thank you for your attention to our concerns. We look forward to working with you on 
this most important issue. 


Sincerely, 

, I J ■' ' ' ■' 

t.j.'.-C'; .vM'--!- 

Ronald C. Sloan 

President, Association of State Criminal Investigative Agencies (ASCIA) 
Director, Colorado Bureau of Investigation 



Richard W. Stanek 

President, Major County Sheriffs’ Association (MCSA) 
Sheriff, Hennepin County (MN) 



Aaron Kennard 

Executive Director, National Sheriffs’ Association (NSA) 

— /I 

Scott Burns 

Executive Director, National District Attorneys’ Association (NDAA) 




Charles H. Ramsey 

President, Major Cities Chiefs ofPolice Association (MCCA) 
Commissioner, Philadelphia Police Department 


3 



183 


Federal Bureau of Investigation 

Agents Association 


May 16, 2012 

Honorable F. James Sensenbrenner 
Chairman 

Subcommittee on Crime. Terrorism, and Homeland Security 
House Committee on the Judiciary 
2138 Rayburn House Office Building 
Washington. DC 205 1 5 

Re: H.R. 2168. the 

Dear Chairman Sensenbrenner: 

I am writing on behalf of the FBI Agents Association (FBIAA), a voluntary professfonal 
association currently representing over 12,000 active duty and retired FBI Special Agents. 
The FBIAA is concerned about the impact that restrictions on the use of geolocational data 
proposed in H.R. 2 168, the GPS Act, could have on criminal investigations. 

FBI Special Agents are committed to using developing technologies in a manner that 
respects individual privacy and constitutional requirements. Towards this end. Special 
Agents often use historical geolocational data fi'om cell-towers and internet protocol 
addresses (IP) in the early stages of investigations to find approximate tocations of persons of 
interest and enable more detailed investigations to proceed. Reasonable access to this data 
can be crucial to efforts to investigate complex criminal networks and ongoing criminal plots. 

To date, courts have found historical and approximate information different fi'om "real-time" 
tracking information, and have allowed law enforcement authorities to obtain such 
information without obtaining a warrant. This data, becau.se it is historical and does not 
entail any potential trespass to a individual's property, is unlike the type of data discussed in 
cases such as the recent Supreme Court case of United States v. Jones, and does not implicate 
reasonable privacy expectations. Accordingly, law enforcement officials have been able to 
utilize this data at the early stages of investigations when obtaining a warrant is not practical. 

Unfortunately, as drafted. H.R. 2168 could comprise the effectiveness of investigations using 
geolocational data. For example, the legislation would require a warrant in order to acquire 
geolocational information, and the definition of "geolocation information" in the bill treats 
historical and real-time data as equivalents in respect to privacy expectations. Requiring a 
warrant for all types of geolocational data in this manner would make it much more time- 
consuming and difficult for law enforcement to obtain access to historical geolocational data. 


Post Office Box 12650 • Arlington, Virginia 22219 
A Non-Govemmental Association 
(703) 247-2173 Fax (703) 247-2175 
E-mail; fbiaa@fbiaa.org www.fbiaa.org 
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Chairman Sensenbrenner 
May 16, 2012 
Page 2 

and such delays could jeopardize the often time-sensitive investigations that rely on such 
data. 

Additionally, the broad definition of gcolocational information used in H.R. 2168 could 
result in application of the legislation’s mandates to IP information. Requiring a warrant for 
all IP data could uimecessarily hinder the ability of law enforcement officials to 
expeditiously locate criminals, such as child pomographers and others, who use their 
computers in connection with criminal plots that threaten the safety of our country and its 
residents. 

The FBIAA appreciates that efforts have been made to address law enforcement concerns by 
including a variety of exceptions in the legislatiotL However, the language of the exceptions 
is too narrow in some cases and too vague in others. For example, the consent exception 
docs not make it clear who has to provide the consent (the property owner or the person 
receiving the property). Further, the exception for emergency situations requires an 
"immediate” threat of death or serious injury that could make it difficult to safely apply the 
exception to circumstances where the threat of death or serious injury is real but perhaps not 
immediate, such as kidnappings. Finally, the “emergency information” exception appears to 
only allow information related to the location of the person whose life is threatened, and not 
information related to the person causing the threat, which could make it difficult for the 
exception to be applied in kidnapping investigations. Given the significant civil and criminal 
penalties for violations of the mandates in H.R. 2168, these ambiguities create very real 
concerns for law enforcement officers. 

For these reasons, the FBIAA is opposed to H.R. 2168 as currently drafted. The FBIAA 
appreciates your consideration of these concerns and hopes that you will continue working 
with the law enforcement community to address these issues. 


Sincerely, 

FBI Agents Association 


Konrad Motyka, President 
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112th congress 
1st Smssion 


H. R.2168 


To amend title 18, United States Code, to specify the cii’cumstances in 
wliich a ])erson may acquire geolocalion iufoiinaljon and for oilier pui’poses. 


IN THE HOUSE OF liEFRESENTATl\H]S 


June 14, 2011 

Mr. Chaffetz (for liirriself and Mr. GoODTiATTE) introduced the fo]h.n\nng 
bill; which was referred to the Committee on the Judiciary, and in addi- 
tion to the Select Committee on Intelligence (Permanent Select), for a 
period to be subsequently determined by the Speaker, in each case for 
considera.ilon of such provisions as fall within the jurisdiction of the com- 
mittee concerned 


A BILL 

To amend title 18, United States Code, to specify the cir- 
cumstances ill whicii a person may acquire geolocation 
information and for other pui'poses. 

1 Be it enacted by the Senate and House of Hepresenta- 

2 lives of the UnUed States of America in Congress assembled, 

3 SECTION 1, SHORT TITLES. 

4 This Act may be cited as the “Oeolocatioual Privacy 

5 and Sui-veillanee Act” or the “GPS Act”. 
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1 SEC. 2. PROTECTION OF GEOLOCATTON INFORMATION. 

2 (a) L\ General. — Pai-t 1 of title 18, United States 

3 Code, is amended by inserting after chapter 119 the fol- 

4 kming: 

5 “CHAPTER 120--GEOLOCATION 

6 INFORMATION 

‘^2601. Definitions. 

“2602. Interception and diselosin-c of gcolocation inCorinaiion, 

“2603. Prohibition of use as evidence of acquired geolocation information. 

“2604. Emergency siti.iation exception. 

“2605. Recoverv'- of cicil damages authorized. 

7 “§2601. Definitions 

8 “In this chapter: 

9 “(1) Electronic communication service. — 

10 The term ‘electronic communicatiou sendee’ has the 

11 meaning given that tenn in section 2510. 

12 “(2) Electronic suio^illancb. — The term 

13 ‘electronic surceillanee’ has the meaning given that 

14 term in section 101 of the Foreign Intelligence Siir- 

1 5 vcillanec Act of 1 978 (50 U.S.C. 1 801 ). 

16 “(3) Gbolocation information. — The term 

17 ‘geoloeation information’ means, with respect to a 

18 person, any information that is not the content of a 

19 conmiunjeation, concerning the location of a wireless 

20 communication device or tracking device (as that 

21 term is defined section 3117) that, in whole or in 

22 part, is generated by or derived from the operation 
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1 of that dcvdcc and that could be used to determine 

2 or infer information regar’ding the location of the 

3 person. 

4 “(4) (tBOlocation information sbrak^e. — 

5 The term ‘geoloeation information sei'vice’ means the 

6 provision of a global positioning sei’vice or other 

7 iiiapping, locational, or directional infoimation serv- 

8 ice to the public, or to such class of users as to be 

9 effectively available to the public, by or through the 

10 operation of aiw wireless communication device, iii- 

1 1 chiding any mobile telephone, global positioning sys- 

12 tern receiving device, mobile computer, or other simi- 

13 lar or successor device. 

14 “(5) iNTERCBPT. — The t(‘rm ‘intt;r(‘,ept' means 

1 5 the acquisition of geolocatiou infonnatioii through 

16 the use of any electronic, mechanical, or other de- 

17 vice. 

18 “(6) Investigative or law enforcement 

19 OFFICe:r. — T he term ‘investigative or law euforce- 

20 ment officer’ means an 3 ’ officer of the Thiited States 

21 or of a State or political subdivision thereof, who is 

22 empowered bv’ law to conduct investigations of, or to 

23 make arrests for, offenses enumerated in this <hap~ 

24 ter, and anv' attorney authorized bv^ law to prosecute 

25 or partidpate in the prosec'-ntiou of siidi offenses. 
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1 “(7) PbkSOK. — The term ‘person' means any 

2 employee or agent of the United States, or any State 

3 or politic'al siibdhdsion thereof, and any indhddnal, 

4 partnership, asso(dation, joint shx'k («>mpany, tnist, 

5 or corpoi'ation. 

6 “(8) Remote compijtinC4 sekwcb. — The term 

7 ‘remote eomputing service’ has the meaning given 

8 that term in section 2711. 

9 “(9) State, — The term ‘State’ means any 

10 State of the United States, the District of Columbia, 

1 1 the Commonwealth of Puerto Rico, and any tcrritoiy 

12 or possession of the Utiited States. 

13 “(10) WtRETjESS commtjktcatton device. — 

14 Tile term ‘wireless <'omnmni(*ation de\d(*.e’ means any 

15 device that enables access to, or use of, an electronic 

16 eoinmunication system or service, remote computing' 

17 service, or geolocatiou information sendee, if that de- 

18 vdee utilizes a radio or other vdreless coimeetion to 

19 access such s^^teni or seiwice. 

20 “(11) CovEBED SERVICE. — The term ‘covered 

21 services’ means electronic communication scrvdec, rc~ 

22 mote computing scivdcc, or of gcolocation informa- 

23 tion sendee. 
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1 “§2602. Interception and disclosure of geoiocation in- 

2 formation 

3 “(a) Ix Genee..\l. — 

4 “(1) PEOlllBlTlOX OK DISCLOSUKE OE USE. — 

5 Except as othei-wise specifically proGded in this 

6 chapter, it shall be unla-wdld for any person to — 

7 ‘‘(A) intentionally intercept, endeavor to 

8 intercept, or procure any other person to inter- 

9 ccpt or endeavor to intercept, geoiocation infor- 

10 rnation pertaining to another person; 

11 “(B) intentionally disclose, or endeavor to 

12 disclose, to any other person geoiocation infor- 

13 ination pertaining to another p>ersoii, knowing 

14 or having reason to know that the information 

15 was obtained through the interception of such 

16 inforniation in violation of this paragraph; 

17 “(C) intentionally use, or endeavor to use, 

18 any geoiocation inforniation, knowing or having 

19 reason to knoiv that the information was ob- 

20 taincd through the interception of such infor- 

21 rnation in liolation of this paragraph; or 

22 “(D)(i) intentionally disclose, or endeavor 

23 to disclose, to any other person the geoiocation 

24 inforniation pertaining to another person inter- 

25 cepted by means authorized by subsections (b) 
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1 throup’h (h), except as provided in such sub- 

2 sections; 

3 “(ii) knowing' or having reason to know 

4 tliat the information was obtained through tiie 

5 interception of sucli infoi'inatioii in connection 

6 with a criminal investigation; 

7 ‘‘(iii) having' obtained oi- received the infor- 

8 Illation in connection with a criminal investig’a- 

9 tion; and 

10 “(iv) with intent to improperly obstruct, 

1 1 impede, or interfere with a duly authorized 

12 criminal investigation. 

13 “(2) PexaTjTT. — Any person who violates para- 

14 graph (1) sliall be fiiKsd under tiiis title, imprisoned 

1 5 not moi'e than five years, or lioth. 

16 “(b) Exception for Inpokaiation Acquired in 

17 THE NOEiLVL COUE«E OF BUSINESS. — It shall not be un- 

18 law'ful under this chapter for an officer, employee, or agent 

19 of a provider of covered seiwlces, whose facilities are used 

20 in the transmission of geolocation information, to inter- 

21 cept, disclose, or use that information in the normal course 

22 of the officer, employee, or agent’s cmplo.ymcnt while cn- 

23 gaged in any activity wliich is a necessarj- incident to the 

24 rendition of seiwlce or to the protection of the rights or 

25 property of the provider of that servlcu, except that a pro- 
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1 vidcr of a "colocation information sctocc to the public 

2 shall not utilize senice obseTTirig or random monitoring 

3 ex(*ept for inerfienical or service (pialitj' ('-ontrol cliet'ks. 

4 “(c-) Exception fob, (iONDiTCTiNt; Eoebion Intbl- 

5 TjIGEnce Surveillance. — Notwithstanding any other 

6 provision of tins chapter, it shall not be unlaivful for an 

7 officer, employee, or agent of the United States in the nor- 

8 mal course of the official duty of the officer, employee, 

9 or agent to conduct electronic, sui’veillance, as authorized 

10 by the Foreign Intelligence Surveillance Act of 1978 (50 

1 1 II.S.C. 1 801 ct seq.). 

12 “(d) Exception FOB Consent. — 

13 “(1) In general. — I t shall not be unlawdril 

14 undm* this ('hapter for a person to interc(;pt 

15 geolocation infonnation pertaining to another pei'son 

16 if such otliei' person has given piioi' consent to such 

17 interception unless such information is intercepted 

18 for the pniqiose of committing any criminal or 

19 tortious act in rtolation of the Constitution or laws 

20 of the United States or of anj? State. 

21 “(2) CPTiTiDREN. — The exception in paragraph 

22 (1) permits a parent or legal guardian of a child to 

23 intercept geolocation information pertaining to that 

24 child or to give consent for another person to inter- 

25 ('-ept siwdi infonnation. 
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1 “(c) Exception for Public Information. — I t 

2 shall not be uTilawfnl under this chapter for any person 

3 to interi^ept or a.iic.ess geolocation information relating to 

4 another person through any system tliat is configured so 

5 that such information is readil 3 ' accessible to the general 

6 public. 

7 “(f) Exception for Emergence Information. — 

8 It shall not be unla\rful under this chapter for any iiives- 

9 tigative or law enforcement officer or other emergencj' re- 

10 sponder to intercept or access geolocation information re- 

1 1 hating to a person if such information is used — 

12 “(1) to respond to a request made by such jier- 

13 son for assistance; or 

14 “(2) in (‘irenrn stances in wliich it is rcaisonable 

15 to believe that the life or safety of the person is 

16 threatened, to assist the person. 

17 “(g) ExttEPTiON FOR Theft or Fraud. — I t shall 

18 not be unlawful under this chapter for a person acting 

19 under color of law to intercept geolocation information 

20 pertaining to the location of another person who has iin- 

21 lawfully taken the dcrtec sending the geolocation informa- 

22 tion if^ — 

23 “(1) the owner or operator of such dertce au- 

24 thorizes the interception of the person’s geolocation 

25 information; 
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9 

“(2) the person aotinp nnder color of law is 
larvfnlly cTigaged in an investigation; and 

“(3) the person acting' umler (‘-olor (»f law has 
reasonable grounds to believe tliat the geolo(;ation 
information of the other pei'soii will be relevant to 
the investigation. 

“(h) Exception for Wariu\nt. — 

■‘(I) Definitions. — In this subsection; 

“(A) Court of competent jurisdic- 
tion. — The term ‘court of competent jurisdic- 
tion’ includes — 

“(i) any distriet court of the United 
States (including a magistrate judge of 
such a (!ourT,) or any Unit(;d States (‘.ourt 
of appeals that — 

“(I) has jui'isdiction over the of- 
fense being investigated; 

“(II) is in or for a district in 
which the provider of a geolocatiou in- 
formation seiwice is located or in 
which the geolocation information is 
stored; or 

“(III) is acting on a reipiest for 
foreign assistance pursuant to section 
3512 of this title; or 
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1 “(ii) a court of o'ciicral criminal juiis- 

2 diction of a, State authorized by the law of 

3 that State to issue searcii warrants, 

4 “(B) (lOtT^ENMEXTAL ENTITY. — The term 

5 ‘governmerital entity' means a departtnent or 

6 agency of the United States or any State or po- 

7 litical subdivision thereof. 

8 “(2) WiViuiAKT. — governmental entity may 

9 intercept geolocation information or require the dis- 

1 0 closure by a provider of covered sei-vices of 

1 1 geoloeation information only pursuant to a warrant 

12 issued using the procedures described in the federal 

13 Kules of Criminal Procedure (or, in the case of a 

14 State (‘ourt, issued using Stut(! w'armnt proce(hires) 

15 by a court of competent juiisdiction, or as otherwise 

16 provided in this chapter oi' the Foreign Intelligence 

17 Suiweillance Act of 1978 (50 U.S.C. 1801 et seq.). 

18 “(i) PnoiiiBiTiON ON Bivulging Geolocation In- 

19 EORALYITON. — 

20 “(1) In general. — Excejit as provided in [)ara- 

21 graph (2), a person providing cov^cred services shall 

22 not intentionally divnlgc geoloeation infonnation per- 

23 tahiing to another person. 

24 “(2) Exceptions.— A person providing cov^ered 

25 seivices may divulge geolociation information — 
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1 “(A) as otherwise authorized in subsections 

2 (b) tliroug'h (li); 

3 “(B) with the la,wful (consent of such otiier 

4 person; 

5 “(C) to another person employed or au- 

6 thorized, or whose facilities are used, to foiward 

7 such g'eolocation infonnatiou to its destinatioii; 

8 or 

9 “(D) which w^as inadvertently obtained by 

1 0 the service provider and which appears to per- 

1 1 tain to the comiTiission of a erime, if such divail- 

12 gence is made to a law eriforeement agency. 

13 “§2603. Prohibition of use as evidence of acquired 

14 geolocation information 

15 “AVlieiiever any geolocation infoi'inatioji has been ac- 

16 quired, no part of such information and no evideiice de- 

17 rived therefrom may be received in evidence in any trial, 

1 8 hearing, or other proceeding in or before any court, grand 

19 jury, department, officer, agency, regulatoiy bodjv legisla- 

20 five committee, or other authority of the United States, 

21 a State, or a political subdivision thereof if the disclosure 

22 of that information would be in violation of this chapter. 

23 “§ 2604. Emergency situation exception 

24 “(a) Emergency Situation Exception. — N ot- 

25 withstanding any other provision of this chapter, any in- 


•HB 2168 IH 


196 


12 

1 vcstigativc or law enforcement officer, specially dcsippiiatcd 

2 by the Attorney (leneral, the Deputy Attorney General, 

3 the Asso(date Attornej^ General, or by the principal pros- 

4 e(‘nting attorney of anj' State or siibdiGsion thereof iicting 

5 pursuant to a statute of that State, may intercept 

6 geoloeation information if — 

7 “(1) such officer reasonably determines that an 

8 emergency^ situation exists that — 

9 ‘‘(A) involves — 

10 “(i) immediate danger of death or se- 

1 1 rious physical injuiy to any person; 

12 “(ii) conspiratorial activities threat- 

13 ening the national security interest; or 

14 “(hi) conspiratorial axthtties Giar- 

15 acteristie of organized crime; and 

16 “(B) requires geoloeation information be 

17 intercepted before an order authorizing such 

1 8 interception can, vnth due diligence, be ob- 

19 tamed; 

20 “(2) there are grounds upon which an order 

21 could he cutcred to authorize such interception; and 

22 “(3) an application for an order approving such 

23 interception is made \rithin 48 hours after the inter- 

24 ception has occurred or begins to occur. 

25 “(b) Failttee To Obtain Court Order. — 
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1 “(1) Tbkjvijnation op acquisition. — I n the 

2 absence of an order, an interception of geolocation 

3 information carried out under sni)sectioii (a) shall 

4 inmiediately terminate wlum tlu; information sought 

5 is obtained or when the application for the ordei" is 

6 denied, wliiehever is earlier, 

7 “(2) Prohibition on use as eihdence. — I n 

8 the event such application for approval is denied, the 

9 geolocation information shall be treated as having 

10 been obtained in riolation of this chapter and an in- 

1 1 vcntoiy shall be sciwcd on the person named in the 

12 application. 

1 3 “§ 2605. Recovery of civil damages authorized 

14 “(a) In (tENERAL. — ^ iVny person whose geolo(;ation 

15 infonnation is intei'cepted, disclosed, or intentionally used 

16 in violation of this cliaptei' may in a civil action recover 

17 from the persoti, other than the United States, which eu- 

1 8 gaged ill that violation such relief as may be appropriate. 

19 “(b) Helief. — In an action under this section, ap- 

20 propriate relief includes — 

21 “(1) such prcliiniuaiy and other equitable or 

22 declaratory relief as may bo appropriate; 

23 “(2) damages under subsection (c) and punitive 

24 damages in appropriate eases; and 
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1 “(3) a reasonable attorney’s fee and other liti- 

2 gatiori costs reasonably incurred. 

3 “((i) Computation of DAiutOBS. — The ('onrt may 

4 assess as damages under this section whichever is the 

5 greatei' of — 

6 “(1) the sum of the actual damages suffered by 

7 the plaintiff and any profits made by the violator as 

8 a result of the violation; or 

9 “(2) statutorjr damages of whichever is the 

10 greater of $100 a day for each day of violation or 

11 $10,000. 

12 “(d) Defense. — I t is a complete defense against any 

13 civil or criminal action brought against an individual for 

14 condiK't in violation of this ehapha* if sudi individual acted 

15 in a good faith reliance on — 

16 “(1) a court warrant or order, a grand jury 

17 subpoena, a legislative authorization, or a statutoiy 

1 8 authorization; 

19 “(2) a request of an iiroestigative or law en~ 

20 forcement officer under section 2604: or 

21 “(3) a good-faith determination that an excep- 

22 tion under section 2602 jjcrmittcd the conduct com- 

23 plained of. 

24 “(e) Limitation. — A civil action under this section 

25 may not be commeri(;ed later than two years after the date 
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1 upon which the claimant first has a reasonable oppor- 

2 tiJTiity to discover the violation. 

3 “(f) ADMmiSTRATn^ Discipline. — I f a (‘ourt or a,p- 

4 propriate <l(>partmen1. or agen(iy (letemmies that the 

5 United States or any of its depatfments or agencies has 

6 violated any proUsion of this chapter, and the court or 

7 appropriate department or agency finds that the cir- 

8 eumstances surrounding the Uolation raise serious ques- 

9 tions about whether or not an officer or employee of the 

10 United States acted willfidly or intentionally with respect 

1 1 to the violation, the department or agency shall, upon rc- 

12 ceipt of a true and correct cop 3 ^ of the decision and tind- 

1 3 ings of the court or appropriate department or agency 

14 promptty initiate a pro(-ee<ling to determini: whether dis- 

15 ciplinaiy action against the officer or' employee is war- 

16 I'anted. If the head of the department or agency involved 

17 determines that discipliiiaiy action is not warranted, such 

18 head shall notify the Inspector General with jurisdiction 

19 over the department or agency concerned and shall provide 

20 the Inspector General with the reasons for such deter- 

21 minatiou. 

22 “(g) ImprOPEP DtSCTjOSURE Is VlOTj.tTlON. — Any 

23 willful disclosure or use hy an investigative nr law enforce- 

24 uient officer or governmental entity of information beyond 
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1 the extent permitted by this chapter is a violation of this 

2 chapter for purposes of this section.”. 

3 (b) CLEKiCitL Ambkdmbkt. — T he table of diapters 

4 for part 1 of title 18, [Jiiited States (lode, is amcaidecl by 

5 inserting' after the item relating to chapter 119 the fol- 

6 kwing: 

''120. CJeolocation information 2601'’. 

7 (e) CONPOKMiNG Amendments, — Section 3512(a) of 

8 title 18, United States Code, is amended — 

9 (1) in {paragraph (2) — 

10 (A) by redesignating subparag:i-aphs (B), 

11 (C), and (D) as subparagraphs (C), (D), and 

12 (E ), respectively; and 

13 (B) by inserting after subparagraph (A) 

14 the following: 

15 “(B) a warrant or order for geoloeation in- 
lb formation or records related thereto, as pro- 

17 rtded under sertion 2602 of this title;”. 

18 SEC. 3. REQUIREMENT FOR SEARCH WARRANTS TO AC- 

19 QUIRE GEOLOCATION INFORSIATION. 

20 Rule 41(a) of the Federal Rules of Criminal Pi'oce- 

21 dure is amended — 

22 (1) in paragraph (2)(A), by striking the period 

23 at the end and inserting a comma and “including 

24 geolocation infoimation.”; and 

25 (2) by adding at the end the following: 
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1 “(F) ‘Grcoloeation information’ has the 

2 meaning given that term in section 2601 of title 

3 18, United States Code.’’. 

4 SEC. 4. FRAUD AND RELATED ACTIVITY IN CONNECTION 

5 WITH OBTAINING GEOLOCATION INFORIVIA- 

6 TION. 

7 (a) Criminal Amolation. — Section 1039(h) of title 

8 18, United States Code, is amended — 

9 (1) in paragraph (2) — 

10 (A) in subparagraph (A), b}' striking 

1 1 “and” at the end; 

12 (B) in subparagraph (B), by striking the 

13 period at the end and inserting a semicolon and 

14 “and”; and 

15 (C) by adding at the end the following new 

16 subparagraph: 

17 “(C) includes any geolocatlon inforinatioii 

18 seiUee.”; 

19 (2) bj- redesignating paragraph (4) as para- 

20 graph (5); and 

21 (3) by inserting after paragraph (3) the fol- 

22 lowing: 

23 “(4) (iBOLOCATION INFORMATION SBRVTCE. 

24 The term ‘geolocation information seiwice' has the 

25 liieaning given that term in sertion 2601.”. 
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(b) CONFORiDKG _;\MBNDMBNTS. — 

(1) Dbftnttton amendments. — S ection 
1039(li)(l) of title 18, United States Code, is 
aiiKinded — 

(A) in tlie paeagrapb lieadiiig, by inserting 
“or GPS” after “phonb’"; and 

(B) in the uiatter preceding subparagraph 
(A), by inserting “or GPS” after “phone”. 

(2) CONFOPtMING AMENDMENTS. — Section 1039 
of title 18, United States Code, is amended — 

(A) in the section heading bj^ inserting “or 
GPS” after “phone”; 

(B) in subsection (a) — 

(i) in tlM! matter pree.eding paragraph 
(1), by inserting “or GPS” after “phone”; 
and 

(ii) in paragraph (4), by inserting “or 
GPS” after “phone”; 

(C) in subsection (b) — 

(i) in the subsection heading, b}' in- 
serting “OR GPS” after “Phone”; 

(ii) in paragraph (1 ), by inserting “or 
GPS” after “phone” both places that term 
appears; and 
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1 (iii) in paragraph (2), by inserting “or 

2 (IPS'’ after “plione”; and 

3 (D) in suijseetion (e) — 

4 (i) in the snbsecfion [leading, by in- 

5 serting- “OR GPS’’ after “Phone"; 

6 (ii) in paragi-aph (1), by inserting “or 

7 GPS” after “plioiie” botli places that term 

8 appears; and 

9 (iii) in paragraph ( 2 ), by inserting “or 

10 GPS” after “phone”. 

11 (3) Ch.'Kptek anaTjTSts. — The table of sections 

12 for chapter 47 of title 18, United States Code, is 

1 3 amended by stril^ing the item relating to section 

14 1039 and inserting the following; 

‘'1039. Fraud and related aetmty in connection with obtaining contidential 
plione or GPS records information of a covered entity.”. 

15 (c) Sentencing Gt:idelines. — 

16 (1) Redrew and amendment. — Not later than 

17 180 days after the date of enactment of this Act, the 

18 United States Sentencing Commission, pursuant to 

19 its authority under section 994 of title 28, United 

20 States Code, and in accordance with this section, 

21 shall rertew and, if appropriate, amend the Federal 

22 sentencing guidelines and policy statements appliea- 

23 bic to persons conrteted of any offense under section 
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1 1039 of title 18, United States Code, as amended by 

2 this section. 

3 (2) At:thOkizatiON. — Tlie United States Sen- 

4 teiKiing Coriirnission may aimaid tl'K! I’ederal sen- 

5 tenciiig guidelines in aeeoi'danee with the procedures 

6 set forth in section 21(a) of the Sentencing Act of 

7 1987 (28 U.S.C. 994 note) as though the authority 

8 under that section had not expired. 

9 SEC. 5. STATEMENT OF EXCLUSIVE MEANS OF ACQUIRING 

10 GEOLOCATION INFORMATION. 

1 1 (a) Tn (IeneraTj. — N o person may acquire the 

1 2 geoloeation information of a person for protective activities 

13 or law enforcement or intelligence purposes except pursu- 

14 ant to a warrant issued pursuant to rule 41 of the l'ed(;ral 

15 Rules of Criminal Procedure, as amended by section 3, 

16 01 ' the amendments made by this Act, or the Foreign Intel- 

17 ligence Suiweillance Act of 1978 (50 U.S.C. 1801). 

18 (b) Geolocation Ineoiuvlition Defined. — In this 

19 section, the term “geolocation information” has the mean- 

20 iiig given that term in section 2601 of title 18, Tbiited 

21 States Code, as amended by section 2. 
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